[Secure-testing-commits] r35672 - data/CVE

[Guido Guenther]

Author: agx
Date: 2015-07-24 09:17:54 +0000 (Fri, 24 Jul 2015)
New Revision: 35672

Modified:
   data/CVE/list
Log:
Mark CVE-2013-4422 as unimportant rather than not affected

We're not building against Qt 4.6 in squeeze but the bug is in the
sources.

Thanks: jmm for the patience

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-24 09:10:14 UTC (rev 35671)
+++ data/CVE/list	2015-07-24 09:17:54 UTC (rev 35672)
@@ -48790,7 +48790,7 @@
 	RESERVED
 CVE-2013-4422 (SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 ...)
 	- quassel 0.9.1-1
-	[squeeze] - quassel <not-affected> (we're building against Qt 4.6 in squeeze)
+	[squeeze] - quassel <unfixed> (unimportant)
 	NOTE: Issue when used with QT >= 4.8.5 and PostgreSQL >= 8.2
 	NOTE: http://quassel-irc.org/node/120
 	NOTE: http://bugs.quassel-irc.org/issues/1244