[Secure-testing-commits] r32305 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-02-18 09:08:45 +0000 (Wed, 18 Feb 2015)
New Revision: 32305

Modified:
   data/CVE/list
Log:
Update entry for mediatomp, #580120 and #778669

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-18 06:34:37 UTC (rev 32304)
+++ data/CVE/list	2015-02-18 09:08:45 UTC (rev 32305)
@@ -84689,8 +84689,10 @@
 	[lenny] - python-numpy <no-dsa> (Minor issue)
 	NOTE: http://projects.scipy.org/numpy/changeset/8364
 CVE-2010-XXXX [mediatomb directory traversal]
-	- mediatomb 0.12.0~svn2018-6.1 (low; bug #580120)
-	[lenny] - mediatomb <no-dsa> (Interface should be disabled in a point update)
+	- mediatomb <unfixed> (low; bug #580120; bug #778669)
+	[squeeze] - mediatomb 0.12.0~svn2018-6.1
+	NOTE: was previously fixed in 580120 but patch was not applied to later maintainer uploads
+
 CVE-2010-3428 (SQL injection vulnerability in modules/notes/json.php in Intermesh ...)
 	NOT-FOR-US: Intermesh Group-Office
 CVE-2010-3427 (Multiple cross-site scripting (XSS) vulnerabilities in Open ...)