Author: nion
Date: 2009-03-17 14:39:56 +0000 (Tue, 17 Mar 2009)
New Revision: 11430
Modified:
data/CVE/list
Log:
CVE-2009-0753 fixed in mldonkey 3.0.0-1
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2009-03-17 14:23:28 UTC (rev 11429)
+++ data/CVE/list 2009-03-17 14:39:56 UTC (rev 11430)
@@ -1103,7 +1103,7 @@
NOTE: should a CVE be requested for this problem?
CVE-2009-0753 (Absolute path traversal vulnerability in MLDonkey 2.8.4 through
2.9.7 ...)
{DSA-1739-1}
- - mldonkey <unfixed> (bug #516829; medium)
+ - mldonkey 3.0.0-1 (bug #516829; medium)
[etch] - mldonkey <not-affected> (vulnerable code not present)
NOTE: daemon is run as non-root and can only be exploited via localhost
CVE-2009-0648 (Multiple cross-site request forgery (CSRF) vulnerabilities in
the ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
