[Secure-testing-commits] r19313 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-05-24 18:09:37 +0000 (Thu, 24 May 2012)
New Revision: 19313

Modified:
   data/CVE/list
Log:
cobbler NFU
drupal non-issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-05-24 18:07:27 UTC (rev 19312)
+++ data/CVE/list	2012-05-24 18:09:37 UTC (rev 19313)
@@ -11,7 +11,8 @@
 CVE-2012-2923 (SQL injection vulnerability in news.php4 in Hypermethod eLearning ...)
 	TODO: check
 CVE-2012-2922 (The request_path function in includes/bootstrap.inc in Drupal 7.14 and ...)
-	TODO: check
+	- drupal7 <unfixed> (unimportant)
+	NOTE: Path disclosure irrelevant for Debian
 CVE-2012-2921 (Universal Feed Parser (aka feedparser or python-feedparser) before ...)
 	- feedparser <unfixed> (bug #674167)
 CVE-2012-2920 (Cross-site scripting (XSS) vulnerability in the userphoto_options_page ...)
@@ -1204,6 +1205,7 @@
 	- vlc <unfixed> (unimportant; bug #671727)
 CVE-2012-2395
 	RESERVED
+	NOT-FOR-US: cobbler
 CVE-2012-2394
 	RESERVED
 	- wireshark 1.6.8-1 (unimportant)