white at alioth.debian.org
2008-Dec-19 07:29 UTC
[Secure-testing-commits] r10731 - in data: CVE DTSA
Author: white
Date: 2008-12-19 07:29:08 +0000 (Fri, 19 Dec 2008)
New Revision: 10731
Modified:
data/CVE/list
data/DTSA/list
Log:
Release courier-authlib DTSA fixing a SQL injection
Modified: data/CVE/list
==================================================================---
data/CVE/list 2008-12-19 04:58:50 UTC (rev 10730)
+++ data/CVE/list 2008-12-19 07:29:08 UTC (rev 10731)
@@ -7709,8 +7709,9 @@
CVE-2008-2381 [gforge sql injection in GroupJoinRequest.class.php]
RESERVED
- gforge 4.7~rc2-7
-CVE-2008-2380
+CVE-2008-2380 [SQL injection vulnerability with PGSQL]
RESERVED
+ - courier-authlib <unfixed>
CVE-2008-2379 (Cross-site scripting (XSS) vulnerability in SquirrelMail before
1.4.17 ...)
{DSA-1682-1}
- squirrelmail 2:1.4.15-4
Modified: data/DTSA/list
==================================================================---
data/DTSA/list 2008-12-19 04:58:50 UTC (rev 10730)
+++ data/DTSA/list 2008-12-19 07:29:08 UTC (rev 10731)
@@ -532,3 +532,6 @@
[November 29th, 2008] DTSA-179-1 geshi - multiple issues
{CVE-2008-5185 CVE-2008-5186}
[lenny] - geshi 1.0.7.22-1+lenny1
+[December 19th, 2008] DTSA-180-1 courier-authlib SQL injection
+ {CVE-2008-2380}
+ [lenny] - courier-authlib 0.61.0-1+lenny1