Author: gilbert-guest
Date: 2009-10-29 15:32:38 +0000 (Thu, 29 Oct 2009)
New Revision: 13144
Modified:
data/CVE/list
Log:
fix request-tracker tracking based on maintainers feedback
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-10-29 15:29:23 UTC (rev 13143)
+++ data/CVE/list 2009-10-29 15:32:38 UTC (rev 13144)
@@ -994,7 +994,7 @@
[etch] - libfwbuilder <not-affected> (Introduced in 3.0.4)
CVE-2009-XXXX [RT: XSS security problem in custom field display]
- request-tracker3.8 3.8.5-1 (bug #546829)
- - request-tracker3.6 3.6.9-1
+ - request-tracker3.6 3.6.9-1 (bug #546778)
[lenny] - request-tracker3.6 <no-dsa> (Minor issue)
TODO: next point update: [lenny] - request-tracker3.6 3.6.7-5+lenny2
CVE-2009-3430 (SQL injection vulnerability in login.php in Allomani Mobile 2.5
allows ...)
@@ -5106,13 +5106,6 @@
{DSA-1899-1 DSA-1898-1}
- strongswan 4.2.14-1.2 (bug #533837)
- openswan 1:2.6.22+dfsg-1
-CVE-2009-XXXX [request-tracker: root priviledges for dialog]
- - request-tracker3.4 <removed> (low; bug #534498)
- [etch] - request-tracker3.4 <not-affected> (flaw introduced in 3.6.2)
- - request-tracker3.6 3.6.8-1 (low; bug #534497)
- [lenny] - request-tracker3.6 <no-dsa> (Targeted for stable point update)
- [etch] - request-tracker3.6 <not-affected> (flaw introduced in 3.6.2)
- - request-tracker3.8 3.8.4-1
CVE-2009-2184 (Absolute path traversal vulnerability in forcedownload.php in
Gravy ...)
NOT-FOR-US: Gravy Media Photo
CVE-2009-2183 (Directory traversal vulnerability in admin-files/ad.php in
Campsite ...)
@@ -5306,6 +5299,10 @@
CVE-2009-XXXX [ShowConfigTab unintentionally grants rights intended for
SuperUsers]
- request-tracker3.6 3.6.8-1 (low; bug #532990)
[lenny] - request-tracker3.6 3.6.7-5+lenny1
+ [etch] - request-tracker3.6 <not-affected> (flaw introduced in 3.6.2)
+ - request-tracker3.4 <removed> (low; bug #534498)
+ [etch] - request-tracker3.4 <not-affected> (flaw introduced in 3.6.2)
+ - request-tracker3.8 3.8.4-1
CVE-2009-2106 (SQL injection vulnerability in the Virtual Civil Services
(civserv) ...)
NOT-FOR-US: Virtual Civil Services extension for TYPO3
CVE-2009-2105 (SQL injection vulnerability in the References database
(t3references) ...)