Author: jmm-guest Date: 2009-12-02 21:25:25 +0000 (Wed, 02 Dec 2009) New Revision: 13428 Modified: data/CVE/list Log: php5 fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-12-02 21:17:03 UTC (rev 13427) +++ data/CVE/list 2009-12-02 21:25:25 UTC (rev 13428) @@ -13646,7 +13646,9 @@ NOT-FOR-US: phpAlumni CVE-2008-5814 (Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and ...) {DSA-1789-1} - - php5 <unfixed> (low; bug #523028) + - php5 5.2.11.dfsg.1-1 (low; bug #523028) + NOTE: I don''t know in which version this was fixed specifically, but + NOTE: I''ve checked that the patch is present in this version - php4 <removed> (low; bug #523028) CVE-2008-5813 (SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before ...) - spip 2.0.6-1