[Secure-testing-commits] r21468 - data/CVE

Moritz Muehlenhoff jmm at alioth.debian.org
Fri Mar 1 17:05:44 UTC 2013


Author: jmm
Date: 2013-03-01 17:05:44 +0000 (Fri, 01 Mar 2013)
New Revision: 21468

Modified:
   data/CVE/list
Log:
wordpress fixed
nginx no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-01 16:55:45 UTC (rev 21467)
+++ data/CVE/list	2013-03-01 17:05:44 UTC (rev 21468)
@@ -4656,6 +4656,7 @@
 	RESERVED
 	- nginx <unfixed> (low; bug #701112)
 	[squeeze] - nginx <no-dsa> (Minor issue)
+	[wheezy] - nginx <no-dsa> (Minor issue)
 CVE-2013-0336
 	RESERVED
 CVE-2013-0335 [VNC proxy can connect to the wrong VM]
@@ -13341,7 +13342,7 @@
 CVE-2012-3414 [libjs-swfupload, wordpress: XSS vulnerability]
 	RESERVED
 	- libjs-swfupload 2.2.0.1+ds1-2 (low; bug #681323)
-	- wordpress <unfixed> (bug #698934)
+	- wordpress 3.5.1+dfsg-1 (bug #698934)
 	NOTE: https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/
 CVE-2012-3413 (The HTMLQuoteColorer::process function in ...)
 	- kdepim <not-affected> (Only affects kdepim >= 4.6)




More information about the Secure-testing-commits mailing list