[Secure-testing-commits] r8754 - data/CVE

white at alioth.debian.org
Fri, 09 May 2008 11:23:43 -0000

Author: white
Date: 2008-05-09 11:23:42 +0000 (Fri, 09 May 2008)
New Revision: 8754

Modified:
   data/CVE/list
Log:
Bugzilla not affected

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-05-09 10:06:39 UTC (rev 8753)
+++ data/CVE/list	2008-05-09 11:23:42 UTC (rev 8754)
@@ -22,8 +22,8 @@
 CVE-2008-2106 (Call of Duty 4 (CoD4) 1.5 and earlier allows remote
authenticated ...)
 	NOT-FOR-US: Call of Duty
 CVE-2008-2105 (email_in.pl in Bugzilla 2.23.4, and later versions before 3.0,
allows ...)
-	- bugzilla 3.0.4-1
-	[etch] - bugzilla <not-affected> (vulnerable code introduced in 2.23.4)
+	- bugzilla <not-affected> (Vulnerable code introduced in 2.23.4)
+	TODO: check when a new upstream version is uploaded
 CVE-2008-2104 (The WebService in Bugzilla before 3.1.3 allows remote
authenticated ...)
 	- bugzilla <not-affected> (regression introduced in 3.1.3 referring to
upstream)
 CVE-2008-2103 (Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and
later ...)