[Secure-testing-commits] r19770 - data/CVE

Moritz Muehlenhoff
Fri, 20 Jul 2012 10:44:39 -0000

Author: jmm
Date: 2012-07-20 10:44:38 +0000 (Fri, 20 Jul 2012)
New Revision: 19770

Modified:
   data/CVE/list
Log:
kdepim issue doesn''t affect Debian, for some reason kdepim is way older
than the other
source packages from the KDE stack


Modified: data/CVE/list
==================================================================---
data/CVE/list	2012-07-20 10:31:36 UTC (rev 19769)
+++ data/CVE/list	2012-07-20 10:44:38 UTC (rev 19770)
@@ -1267,8 +1267,7 @@
 	- libjs-swfupload 2.2.0.1+ds1-2 (low; bug #681323)
 CVE-2012-3413 [kdepim: kmail/kontact message viewer incorrectly defaults to
having JavaScript, Java, and Plugins enabled]
 	RESERVED
-	- kdepim <unfixed>
-	TODO: Check if Debian is affected
+	- kdepim <not-affected> (Only affects kdepim >= 4.6)
 	NOTE: CVE-request http://www.openwall.com/lists/oss-security/2012/07/13/3
 	NOTE:
https://projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1022690