[Secure-testing-commits] r30693 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2014-12-12 10:11:04 +0000 (Fri, 12 Dec 2014)
New Revision: 30693

Modified:
   data/CVE/list
Log:
Mark CVE-2010-5109 as not affecting claws-mail in squeeze/wheezy

The problematic binary package is only built by claws-mail-extra-plugins
and not by claws-mail.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-12 10:10:57 UTC (rev 30692)
+++ data/CVE/list	2014-12-12 10:11:04 UTC (rev 30693)
@@ -54988,6 +54988,8 @@
 	[squeeze] - claws-mail-extra-plugins <no-dsa> (Minor issue)
 	[wheezy] - claws-mail-extra-plugins <no-dsa> (Minor issue)
 	- claws-mail 3.11.1-2 (bug #771360)
+	[squeeze] - claws-mail <not-affected> (In Squeeze, the problematic package claws-mail-tnef-parser is built by claws-mail-extra-plugins)
+	[wheezy] - claws-mail <not-affected> (In Wheezy, the problematic package claws-mail-tnef-parser is built by claws-mail-extra-plugins)
 CVE-2010-5108 [Trac Ticket Modification Workflow Permission Restriction Bypass]
 	RESERVED
 	- trac 0.11.7-1 (bug #573260)