[Secure-testing-commits] r20654 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-12-12 17:55:06 +0000 (Wed, 12 Dec 2012)
New Revision: 20654

Modified:
   data/CVE/list
Log:
owncloud tpu fixes
python2.6 no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-12-12 17:52:00 UTC (rev 20653)
+++ data/CVE/list	2012-12-12 17:55:06 UTC (rev 20654)
@@ -2581,22 +2581,27 @@
 CVE-2012-5610
 	RESERVED
 	- owncloud 4.0.8debian-1.1 (bug #693990)
+	[wheezy] - owncloud 4.0.4debian2-3.1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/11/30/2
 CVE-2012-5609
 	RESERVED
 	- owncloud 4.0.8debian-1.1 (bug #693990)
+	[wheezy] - owncloud 4.0.4debian2-3.1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/11/30/2
 CVE-2012-5608
 	RESERVED
 	- owncloud 4.0.8debian-1.1 (bug #693990)
+	[wheezy] - owncloud 4.0.4debian2-3.1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/11/30/2
 CVE-2012-5607
 	RESERVED
 	- owncloud 4.0.8debian-1.1 (bug #693990)
+	[wheezy] - owncloud 4.0.4debian2-3.1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/11/30/2
 CVE-2012-5606
 	RESERVED
 	- owncloud 4.0.8debian-1.1 (bug #693990)
+	[wheezy] - owncloud 4.0.4debian2-3.1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/11/30/2
 CVE-2012-5605
 	RESERVED
@@ -2926,8 +2931,8 @@
 	NOT-FOR-US: Plone not packaged in Debian, see bug #692899
 CVE-2012-5487 [ Zope/Plone: Restricted Python sandbox escape ]
 	RESERVED
-	- zope2.12 <unfixed> (bug #692899)
-	NOTE: https://plone.org/products/plone/security/advisories/20121106/03
+	- zope2.12 <unfixed> (unimportant; bug #692899)
+	NOTE: Non-issue, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692899#20
 CVE-2012-5486 [ Zope/Plone: Reflexive HTTP header injection ]
 	RESERVED
 	- zope2.12 <unfixed> (bug #692899)
@@ -28688,6 +28693,7 @@
 	- linux-2.6 2.6.38-1
 CVE-2011-1015 (The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in ...)
 	- python2.6 2.6.8-1 (low; bug #614860)
+	[wheezy] - python2.6 <no-dsa> (Minor issue, fix modifies behaviour, too intrusive to backport)
 	[squeeze] - python2.6 <no-dsa> (Minor issue, fix modifies behaviour, too intrusive to backport)
 	- python2.5 <unfixed> (low)
 	[squeeze] - python2.5 <no-dsa> (Minor issue, fix modifies behaviour, too intrusive to backport)