Secure testing commits - Nov 2008 - r10532 - data/CVE

Author: nion
Date: 2008-11-29 16:52:59 +0000 (Sat, 29 Nov 2008)
New Revision: 10532

Modified:
   data/CVE/list
Log:
CVE-2008-5185 fixed in geshi 1.0.8.1-1

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-11-29 16:12:47 UTC (rev 10531)
+++ data/CVE/list	2008-11-29 16:52:59 UTC (rev 10532)
@@ -211,9 +211,7 @@
 	NOTE: difficult to exploit
 	NOTE: see http://www.openssh.org/txt/cbc.adv
 CVE-2008-5185 (The highlighting functionality in geshi.php in GeSHi before
1.0.8 ...)
-	- geshi <unfixed> (medium)
-	NOTE: the maintainer is aware of this
-	NOTE: http://www.openwall.com/lists/oss-security/2008/11/20/4
+	- geshi 1.0.8.1-1 (medium)
 CVE-2008-5160 (Unspecified vulnerability in MyServer 0.8.11 allows remote
attackers ...)
 	- msp-webserver <unfixed> (bug #506268)
 CVE-2008-5159 (Integer overflow in the remote administration protocol
processing in ...)