Author: jmm
Date: 2013-01-25 14:17:20 +0000 (Fri, 25 Jan 2013)
New Revision: 21043

Modified:
   data/CVE/list
Log:
one mantis issue not-affected
one collabtive issue fixed, the other no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2013-01-25 13:20:37 UTC (rev 21042)
+++ data/CVE/list       2013-01-25 14:17:20 UTC (rev 21043)
@@ -2998,9 +2998,8 @@
        NOTE: CVE request 
http://www.openwall.com/lists/oss-security/2013/01/18/2
 CVE-2013-0197 [XSS vulnerability with match_type filter]
        RESERVED
-       - mantis <unfixed> (bug #698481)
+       - mantis <not-affected> (This only affects the 1.2.12 version, which 
isn't present in Debia, bug #698481)
        NOTE: http://www.mantisbt.org/bugs/view.php?id=15373
-       NOTE: According to 
http://marc.info/?l=oss-security&m=135876600302683&w=2 only affecting 1.2.12?
 CVE-2013-0196
        RESERVED
 CVE-2013-0195 [Unspecified XSS]
@@ -4185,9 +4184,11 @@
 CVE-2010-5286 (Directory traversal vulnerability in Jstore (com_jstore) 
component for ...)
        NOT-FOR-US: Joomla jstore
 CVE-2010-5285 (Cross-site request forgery (CSRF) vulnerability in admin.php in 
...)
-       - collabtive <unfixed> (bug #695348)
+       - collabtive <unfixed> (low; bug #695348)
+       [wheezy] - collabtive <no-dsa> (Minor issue)
 CVE-2010-5284 (Multiple cross-site scripting (XSS) vulnerabilities in 
Collabtive ...)
-       - collabtive <unfixed> (bug #695348)
+       - collabtive 0.7.6-1 (bug #695348)
+       NOTE: Might be fixed earlier, but 0.7.6 was tested
 CVE-2010-5283 (Cross-site request forgery (CSRF) vulnerability in OpenText ECM 
...)
        NOT-FOR-US: OpenText ECM
 CVE-2010-5282 (Multiple cross-site scripting (XSS) vulnerabilities in OpenText 
ECM ...)


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to