[Secure-testing-commits] r12569 - data/CVE

Michael Gilbert
Tue, 11 Aug 2009 20:00:38 -0000

Author: gilbert-guest
Date: 2009-08-11 20:00:38 +0000 (Tue, 11 Aug 2009)
New Revision: 12569

Modified:
   data/CVE/list
Log:
recommend removing notes when version added addresses those notes


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-08-11 19:43:11 UTC (rev 12568)
+++ data/CVE/list	2009-08-11 20:00:38 UTC (rev 12569)
@@ -1196,15 +1196,10 @@
 	NOT-FOR-US: phpGreetCards
 CVE-2009-2336 (The forgotten mail interface in WordPress and WordPress MU
before ...)
 	- wordpress 2.8.3-1 (low; bug #536724)
-	NOTE: fixed in upstream 2.8.1, which is not yet in unstable
 CVE-2009-2335 (WordPress and WordPress MU before 2.8.1 exhibit different
behavior for ...)
 	- wordpress 2.8.3-1 (low; bug #536724)
-	NOTE: fixed in upstream 2.8.1, which is not yet in unstable
 CVE-2009-2334 (wp-admin/admin.php in WordPress and WordPress MU before 2.8.1
does not ...)
 	- wordpress 2.8.3-1 (low; bug #536724)
-	NOTE: initial fix in 2.8.1 is incomplete (see bug report)
-	NOTE: claimed to be fully fixed in upstream in 2.8.3
-	TODO: recheck when 2.8.x enters unstable
 CVE-2009-2333 (Multiple directory traversal vulnerabilities in CMS Chainuk 1.2
and ...)
 	NOT-FOR-US: CMS Chainuk
 CVE-2009-2332 (CMS Chainuk 1.2 and earlier allows remote attackers to obtain
...)