Author: holger
Date: 2014-09-16 20:47:09 +0000 (Tue, 16 Sep 2014)
New Revision: 28837
Modified:
data/CVE/list
Log:
document current status of CVE-2014-2054 for moodle+dolibarr
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-09-16 20:09:24 UTC (rev 28836)
+++ data/CVE/list 2014-09-16 20:47:09 UTC (rev 28837)
@@ -10688,10 +10688,14 @@
NOTE: http://owncloud.org/about/security/advisories/oC-SA-2014-006/
CVE-2014-2054 (PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15
and ...)
- owncloud 6.0.2+dfsg-1
- - dolibarr <undetermined>
- - moodle <undetermined>
- NOTE: dolibarr, moodle also contain a copy of PHPExcel, owncloud does
not mention details
+ - dolibarr 3.5.3+dfsg1-1
+ - moodle <unfixed>
+ [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts)
+ NOTE: dolibarr removed phpexcel in 3.5.3+dfsg1-1 / #729538
+ NOTE: moodle also contain a copy of PHPExcel
+ NOTE: owncloud does not mention details
NOTE: http://owncloud.org/about/security/advisories/oC-SA-2014-006/
+ NOTE: https://github.com/PHPOffice/PHPExcel/blob/develop/changelog.txt
CVE-2014-2053 (getID3() before 1.9.8, as used in ownCloud Server before 5.0.15
and ...)
{DSA-3001-1}
- owncloud 6.0.2+dfsg-1
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
