[Secure-testing-commits] r20618 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-12-06 12:07:46 +0000 (Thu, 06 Dec 2012)
New Revision: 20618

Modified:
   data/CVE/list
Log:
bind9 fixed (sid only, since testing is older)
commons-httpclient fixed
axis fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-12-06 09:38:01 UTC (rev 20617)
+++ data/CVE/list	2012-12-06 12:07:46 UTC (rev 20618)
@@ -881,9 +881,9 @@
 	NOT-FOR-US: Axis2/Java
 	NOTE: Axis2/C is packaged as axis2c, but this is a different software.
 CVE-2012-5784 (Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal ...)
-	- axis <unfixed> (bug #692650)
+	- axis 1.4-16.1 (bug #692650)
 CVE-2012-5783 (Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments ...)
-	- commons-httpclient <unfixed> (bug #692442)
+	- commons-httpclient 3.1-10.1 (bug #692442)
 CVE-2012-5782 (Amazon Flexible Payments Service (FPS) PHP Library does not verify ...)
 	NOT-FOR-US: Amazon Flexible Payments Service
 CVE-2012-5781 (Amazon Elastic Load Balancing API Tools does not verify that the ...)
@@ -1076,7 +1076,7 @@
 	RESERVED
 CVE-2012-5688
 	RESERVED
-	- bind9 <unfixed> (bug #695192)
+	- bind9 1:9.8.4.dfsg.P1-1 (bug #695192)
 	[squeeze] - bind9 <not-affected> (Only affects 9.8 and 9.9)
 CVE-2012-5687 (Directory traversal vulnerability in the web-based management feature ...)
 	NOT-FOR-US: TP-LINK TL-WR841N router