[Secure-testing-commits] r36862 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Sep 27 12:14:01 UTC 2015


Author: carnil
Date: 2015-09-27 12:14:01 +0000 (Sun, 27 Sep 2015)
New Revision: 36862

Modified:
   data/CVE/list
Log:
Update entry for one historic php-gettext entry

The secunia reference is not accessible anymore.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-27 12:01:16 UTC (rev 36861)
+++ data/CVE/list	2015-09-27 12:14:01 UTC (rev 36862)
@@ -95644,7 +95644,8 @@
 	[lenny] - evince <unfixed> (bug #612668)
 CVE-2011-XXXX [php-gettext XSS]
 	- php-gettext <unfixed> (unimportant)
-	NOTE: http://secunia.com/advisories/43228/ they are only examples
+	NOTE: http://www.autosectools.com/Advisories/CiviCRM.3.3.3.Drupal-Joomla_Reflected.Cross-site.Scripting_102.html
+	NOTE: Vulnerable code only in examples/
 CVE-2011-1136 [tesseract tempfile]
 	RESERVED
 	- tesseract 2.04-2.1 (low; bug #612032)




More information about the Secure-testing-commits mailing list