Author: jmm Date: 2012-07-10 15:43:54 +0000 (Tue, 10 Jul 2012) New Revision: 19703 Modified: data/CVE/list Log: mono _is_ affected by CVE-2012-3382. <not-affected> entries need to be checked diligently! Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-07-10 15:36:38 UTC (rev 19702) +++ data/CVE/list 2012-07-10 15:43:54 UTC (rev 19703) @@ -1031,7 +1031,7 @@ NOTE: http://www.openwall.com/lists/oss-security/2012/07/08/1 CVE-2012-3382 [XSS in a Mono System.web error page] RESERVED - - mono <not-affected> + - mono <unfixed> NOTE: HttpForbiddenHandler.cs not in Debian NOTE: https://bugzilla.novell.com/show_bug.cgi?id=769799 NOTE: https://github.com/mono/mono/commit/d16d4623edb210635bec3ca3786481b82cde25a2