[Secure-testing-commits] r30697 - in data: . CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2014-12-12 11:07:41 +0000 (Fri, 12 Dec 2014)
New Revision: 30697

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Mark CVE-2014-4037/fckeditor as no-dsa on squeeze

We follow the decision made for wheezy. Thus drop it from dla-needed.txt.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-12 11:07:29 UTC (rev 30696)
+++ data/CVE/list	2014-12-12 11:07:41 UTC (rev 30697)
@@ -13341,6 +13341,7 @@
 CVE-2014-4037 (Cross-site scripting (XSS) vulnerability in ...)
 	- fckeditor <unfixed> (low; bug #752873)
 	[wheezy] - fckeditor <no-dsa> (Minor issue)
+	[squeeze] - fckeditor <no-dsa> (Minor issue)
 	- docvert <removed>
 	[wheezy] - docvert <no-dsa> (Minor issue)
 	[squeeze] - docvert <no-dsa> (Minor issue)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2014-12-12 11:07:29 UTC (rev 30696)
+++ data/dla-needed.txt	2014-12-12 11:07:41 UTC (rev 30697)
@@ -21,8 +21,6 @@
 --
 ejabberd
 --
-fckeditor
---
 getmail4
 --
 httpcomponents-client