[Secure-testing-commits] r27444 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-06-25 07:57:58 +0000 (Wed, 25 Jun 2014)
New Revision: 27444

Modified:
   data/CVE/list
Log:
symfony issues not-affected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-25 07:40:30 UTC (rev 27443)
+++ data/CVE/list	2014-06-25 07:57:58 UTC (rev 27444)
@@ -27037,7 +27037,7 @@
 CVE-2013-1398 (The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does ...)
 	- puppet <not-affected> (Only affects Puppet Enterprise)
 CVE-2013-1397 (Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote ...)
-	TODO: check
+	- php-symfony2-yaml <not-affected> (Only affects versions 2.0, 2.1, 2.2)
 CVE-2013-1396
 	RESERVED
 CVE-2013-1395
@@ -27142,7 +27142,7 @@
 CVE-2013-1349 (Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 ...)
 	NOT-FOR-US: openSIS
 CVE-2013-1348 (The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote ...)
-	TODO: check
+	- php-symfony2-yaml <not-affected> (Only affects version 2.0)
 CVE-2013-1347 (Microsoft Internet Explorer 8 does not properly handle objects in ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2013-1346 (mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 ...)