fw at alioth.debian.org
2008-Dec-03 18:54 UTC
[Secure-testing-commits] r10600 - in data: CVE DSA
Author: fw
Date: 2008-12-03 18:54:09 +0000 (Wed, 03 Dec 2008)
New Revision: 10600
Modified:
data/CVE/list
data/DSA/list
Log:
CVE-2008-5080: incorrect fix for awstats
Modified: data/CVE/list
==================================================================---
data/CVE/list 2008-12-03 18:27:40 UTC (rev 10599)
+++ data/CVE/list 2008-12-03 18:54:09 UTC (rev 10600)
@@ -529,8 +529,10 @@
RESERVED
CVE-2008-5081
RESERVED
-CVE-2008-5080
+CVE-2008-5080 [incorrect fix of CVE-2008-3714]
+ {CVE-2008-3714}
RESERVED
+ - awstats <unfixed> (bug #495432; low)
CVE-2008-5079
RESERVED
CVE-2008-5078
Modified: data/DSA/list
==================================================================---
data/DSA/list 2008-12-03 18:27:40 UTC (rev 10599)
+++ data/DSA/list 2008-12-03 18:54:09 UTC (rev 10600)
@@ -1,5 +1,5 @@
[03 Dec 2008] DSA-1679-1 awstats - cross-site scripting
- {CVE-2008-3714}
+ {CVE-2008-3714 CVE-2008-5080}
[etch] - awstats 6.5+dfsg-1+etch1
[03 Dec 2008] DSA-1678-1 perl - privilege escalation
{CVE-2004-0452 CVE-2005-0448 CVE-2008-5302 CVE-2008-5303}