[Secure-testing-commits] r18745 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-03-23 14:44:31 +0000 (Fri, 23 Mar 2012)
New Revision: 18745

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
python no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-03-23 14:37:33 UTC (rev 18744)
+++ data/CVE/list	2012-03-23 14:44:31 UTC (rev 18745)
@@ -3999,7 +3999,9 @@
 	RESERVED
 	- python2.7 2.7.2-8
 	- python2.6 <unfixed> (low; bug #664135)
+	[squeeze] - python2.6 <no-dsa> (Minor issue)
 	- python2.5 <removed> 
+	[squeeze] - python2.5 <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2012/03/14/11
 CVE-2011-4939 (The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin ...)
 	- pidgin <unfixed> (bug #664028)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2012-03-23 14:37:33 UTC (rev 18744)
+++ data/spu-candidates.txt	2012-03-23 14:44:31 UTC (rev 18745)
@@ -234,6 +234,17 @@
 
 --
 
+python2.5 (CVE-2011-4940 [python: potential XSS in SimpleHTTPServer's list_directory()])
+http://www.openwall.com/lists/oss-security/2012/03/14/11
+
+--
+
+python2.6 (CVE-2011-4940 [python: potential XSS in SimpleHTTPServer's list_directory()])
+#664135
+http://www.openwall.com/lists/oss-security/2012/03/14/11
+
+--
+
 pyro (CVE-2011-2765)
 #631912
 awaiting maintainer response