Author: carnil Date: 2013-12-23 21:26:26 +0000 (Mon, 23 Dec 2013) New Revision: 24885
Modified: data/CVE/list Log: Add tow CVE's for devscripts, uploaded to unstable in 2.13.9 Modified: data/CVE/list =================================================================== --- data/CVE/list 2013-12-23 21:17:53 UTC (rev 24884) +++ data/CVE/list 2013-12-23 21:26:26 UTC (rev 24885) @@ -791,7 +791,7 @@ CVE-2013-7086 (The message function in lib/webbynode/notify.rb in the Webbynode gem ...) NOT-FOR-US: Ruby Gem Webbynode CVE-2013-7085 (Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows ...) - - devscripts <unfixed> (bug #732006) + - devscripts 2.13.9 (bug #732006) [wheezy] - devscripts <not-affected> (does not contain the vulnerable code; introduced in 2.13.5) [squeeze] - devscripts <not-affected> (does not contain the vulnerable code; introduced in 2.13.5) CVE-2013-7082 (Cross-site scripting (XSS) vulnerability in the errorAction method in ...) @@ -1964,6 +1964,7 @@ RESERVED CVE-2013-6888 RESERVED + - devscripts 2.13.9 CVE-2013-6887 RESERVED - openjpeg <not-affected> (only affects 1.5, in experimental) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits