[Secure-testing-commits] r36030 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-08-13 09:51:22 +0000 (Thu, 13 Aug 2015)
New Revision: 36030

Modified:
   data/CVE/list
Log:
Add fixed version for request-tracker4 fixes in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-13 07:58:46 UTC (rev 36029)
+++ data/CVE/list	2015-08-13 09:51:22 UTC (rev 36030)
@@ -1,7 +1,7 @@
 CVE-2015-5965 (The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the ...)
 	NOT-FOR-US: Fortinet FortiOS
 CVE-2015-XXXX [crypt XSS]
-	- request-tracker4 <unfixed>
+	- request-tracker4 4.2.11-2
 	[wheezy] - request-tracker4 <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/bestpractical/rt/commit/36a461947b00b105336adb4997d1c7767d8484c4
 	NOTE: No CVE assigned by now
@@ -1289,7 +1289,7 @@
 	RESERVED
 CVE-2015-5475 [XSS]
 	RESERVED
-	- request-tracker4 <unfixed>
+	- request-tracker4 4.2.11-2
 	NOTE: https://github.com/bestpractical/rt/commit/67d517ba3421ba462e349c73207a627d137ef8ac (4.2.x)
 	NOTE: https://github.com/bestpractical/rt/commit/4ec786bb4743f67a35a634c1bf43b13d3d3b39a9 (4.0.x)
 CVE-2015-5474