Author: jmm
Date: 2012-01-20 17:20:24 +0000 (Fri, 20 Jan 2012)
New Revision: 18233
Modified:
data/CVE/list
Log:
citadel fixed
three older otrs issues unimportant after consultation with upstream
Modified: data/CVE/list
==================================================================---
data/CVE/list 2012-01-20 17:13:06 UTC (rev 18232)
+++ data/CVE/list 2012-01-20 17:20:24 UTC (rev 18233)
@@ -11183,7 +11183,7 @@
NOTE: DJabberd
CVE-2011-1756 (modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not
properly ...)
{DSA-2250-1}
- - citadel <unfixed> (medium)
+ - citadel 8.04-1 (medium)
CVE-2011-1755 (jabberd2 before 2.2.14 does not properly detect recursion during
...)
- jabberd2 2.2.8-2.1 (medium)
CVE-2011-1754 (jabberd14 1.6.1.1 and earlier does not properly detect recursion
...)
@@ -12145,7 +12145,7 @@
- webkit <not-affected> (chromium specific)
CVE-2011-1433 (The (1) AgentInterface and (2) CustomerInterface components in
Open ...)
- otrs2 3.0.8+dfsg1-1
- TODO: check, whether otrs2 is really affected
+ NOTE: Negligable security impact
CVE-2010-4768 (Open Ticket Request System (OTRS) before 2.3.5 does not properly
...)
- otrs2 2.4.5-1 (low)
[lenny] - otrs2 <no-dsa> (Minor issue)
@@ -12162,15 +12162,14 @@
- otrs2 2.4.10+dfsg1-1 (unimportant)
NOTE: Marginal security impact, standard bug
CVE-2010-4763 (The ACL-customer-status Ticket Type setting in Open Ticket
Request ...)
- - otrs2 3.0.8+dfsg1-1
- TODO: check, whether otrs2 is really affected
+ - otrs2 3.0.8+dfsg1-1 (unimportant)
+ NOTE: Negligable security impact
CVE-2010-4762 (Cross-site scripting (XSS) vulnerability in the rich-text-editor
...)
- - otrs2 3.0.8+dfsg1-1
- TODO: check, whether otrs2 is really affected
+ - otrs2 3.0.8+dfsg1-1 (unimportant)
+ NOTE: Negligable security impact
CVE-2010-4761 (The customer-interface ticket-print dialog in Open Ticket
Request ...)
- otrs2 3.0.8+dfsg1-1 (unimportant)
NOTE: Marginal security impact, standard bug
- TODO: check, whether otrs2 is really affected
CVE-2010-4760 (Open Ticket Request System (OTRS) before 3.0.0-beta6 adds ...)
- otrs2 3.0.8+dfsg1-1 (unimportant)
NOTE: No security impact, feature enhancement