Author: fw Date: 2012-04-24 09:24:14 +0000 (Tue, 24 Apr 2012) New Revision: 19048 Modified: data/CVE/list Log: CVE-2012-1039, CVE-2009-0933: dotclear fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-04-24 09:17:01 UTC (rev 19047) +++ data/CVE/list 2012-04-24 09:24:14 UTC (rev 19048) @@ -3199,8 +3199,7 @@ CVE-2012-1040 RESERVED CVE-2012-1039 (Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before ...) - - dotclear <unfixed> - TODO: check + - dotclear 2.4.2+dfsg-1 CVE-2012-1038 RESERVED CVE-2012-1037 @@ -46128,8 +46127,7 @@ [lenny] - linux-2.6 <not-affected> (Vulnerability was introduced in 2.6.27-rc9) - linux-2.6.24 <not-affected> (Vulnerability was introduced in 2.6.27-rc9) CVE-2009-0933 (Cross-site scripting (XSS) vulnerability in the administrative ...) - - dotclear <unfixed> - TODO: check + - dotclear <not-affected> (Fixed before initial upload to archive) CVE-2009-0932 (Directory traversal vulnerability in framework/Image/Image.php in ...) {DSA-1765-1} - horde3 3.2.2+debian0-2 (bug #513265; medium)