[Secure-testing-commits] r18746 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-03-23 14:47:39 +0000 (Fri, 23 Mar 2012)
New Revision: 18746

Modified:
   data/CVE/list
Log:
rather unimportant actually


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-03-23 14:44:31 UTC (rev 18745)
+++ data/CVE/list	2012-03-23 14:47:39 UTC (rev 18746)
@@ -3997,12 +3997,11 @@
 	NOT-FOR-US: piwik
 CVE-2011-4940 [python: potential XSS in SimpleHTTPServer's list_directory()]
 	RESERVED
-	- python2.7 2.7.2-8
-	- python2.6 <unfixed> (low; bug #664135)
-	[squeeze] - python2.6 <no-dsa> (Minor issue)
-	- python2.5 <removed> 
-	[squeeze] - python2.5 <no-dsa> (Minor issue)
+	- python2.7 2.7.2-8 (unimportant)
+	- python2.6 <unfixed> (unimportant; bug #664135)
+	- python2.5 <removed> (unimportant)
 	NOTE: http://www.openwall.com/lists/oss-security/2012/03/14/11
+	NOTE: This only affects IE7, which is inherently insecure anyway
 CVE-2011-4939 (The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin ...)
 	- pidgin <unfixed> (bug #664028)
 	[squeeze] - pidgin <not-affected> (vulnerable code not present)