[Secure-testing-commits] r21655 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-03-17 06:19:38 +0000 (Sun, 17 Mar 2013)
New Revision: 21655

Modified:
   data/CVE/list
Log:
Adjust fixed version for CVE-2012-0790

The fix in upstream 2.6.7 of smokeping was not complete, and upstream
expanded the set of characters in 2.6.9. smokeping 2.6.8-2 includes
these.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-16 09:14:23 UTC (rev 21654)
+++ data/CVE/list	2013-03-17 06:19:38 UTC (rev 21655)
@@ -20724,7 +20724,7 @@
 	- imp4 4.3.10+debian0-1.1 (bug #659392)
 CVE-2012-0790 (Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping ...)
 	{DSA-2651-1}
-	- smokeping 2.6.7-1 (bug #659899)
+	- smokeping 2.6.8-2 (bug #659899)
 CVE-2012-0789 (Memory leak in the timezone functionality in PHP before 5.3.9 allows ...)
 	- php5 5.3.9-1 (low)
 	[squeeze] - php5 <no-dsa> (Too introsive to backport)