Secure testing commits - Jun 2007 - r6056 - data/CVE

Author: alec-guest
Date: 2007-06-25 04:02:13 +0000 (Mon, 25 Jun 2007)
New Revision: 6056

Modified:
   data/CVE/list
Log:
fixed: wordpress x2, mysql

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-06-23 21:14:08 UTC (rev 6055)
+++ data/CVE/list	2007-06-25 04:02:13 UTC (rev 6056)
@@ -341,7 +341,7 @@
 	- ipplan 4.85-2 (bug #429193)
 	- glpi 0.68.3.2-1 (bug #429192)
 	[etch] - glpi <not-affected> (Vulnerable code not used)
-	- wordpress <unfixed> (bug #429194)
+	- wordpress 2.2.1-1 (bug #429194)
 	[etch] - wordpress <not-affected> (Vulnerable code not present)
 CVE-2007-3214 (SQL injection vulnerability in style.php in e-Vision CMS 2.02
and ...)
 	NOT-FOR-US: e-Vision CMS
@@ -505,7 +505,7 @@
 CVE-2007-3141 (PHP remote file inclusion vulnerability in core/editor.php in
...)
 	NOT-FOR-US: phpWebThings
 CVE-2007-3140 (SQL injection vulnerability in xmlrpc.php in WordPress 2.2
allows ...)
-	- wordpress <unfixed> (bug #428073)
+	- wordpress 2.2.1-1 (bug #428073)
 CVE-2007-3139 (config/general.php in Quick.Cart 2.2 and earlier uses a default
...)
 	NOT-FOR-US: Quick.Cart
 CVE-2007-3138 (Directory traversal vulnerability in index.php in Open Solution
...)
@@ -1529,7 +1529,7 @@
 	NOTE: the CVE says it''s fixed in 5.0.40, but 5.0.41 is vulnerable
 	NOTE: http://bugs.mysql.com/bug.php?id=28499
 CVE-2007-2691 (MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before
5.1.18 does ...)
-	- mysql-dfsg-5.0 <unfixed> (bug #424778)
+	- mysql-dfsg-5.0 5.0.41a-1 (bug #424778)
 	[sarge] - mysql-dfsg-4.1 <unfixed> (bug #424830)
 	[sarge] - mysql-dfsg <not-affected>
 CVE-2007-2690 (Multiple IBM ISS Proventia Series products, including the A, G,
and M ...)