[Secure-testing-commits] r30742 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Dec 14 19:55:14 UTC 2014


Author: carnil
Date: 2014-12-14 19:55:13 +0000 (Sun, 14 Dec 2014)
New Revision: 30742

Modified:
   data/CVE/list
Log:
Adjust entry for CVE-2012-5825

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-14 19:11:13 UTC (rev 30741)
+++ data/CVE/list	2014-12-14 19:55:13 UTC (rev 30742)
@@ -45898,9 +45898,10 @@
 CVE-2011-5236 (Moneris eSelectPlus 2.03 PHP API does not verify that the server ...)
 	NOT-FOR-US: Moneris eSelectPlus 2.03 PHP API
 CVE-2012-5825 (Tweepy does not verify that the server hostname matches a domain name ...)
-	- tweepy 3.1.0-1 (low; bug #692444)
+	- tweepy <unfixed> (low; bug #692444)
 	[jessie] - tweepy <no-dsa> (Minor issue)
 	[wheezy] - tweepy <no-dsa> (Minor issue)
+	NOTE: fixed in 3.1.0-1 upload to experimental, mark once uploaded to unstable
 CVE-2012-5824 (Trillian 5.1.0.19 does not verify that the server hostname matches a ...)
 	NOT-FOR-US: Trillian
 CVE-2012-5823 (Open Source Classifieds does not verify that the server hostname ...)




More information about the Secure-testing-commits mailing list