Author: carnil
Date: 2014-10-28 13:45:32 +0000 (Tue, 28 Oct 2014)
New Revision: 29705
Modified:
data/CVE/list
Log:
Add fixed version for two dokuwiki CVEs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-10-28 11:19:43 UTC (rev 29704)
+++ data/CVE/list 2014-10-28 13:45:32 UTC (rev 29705)
@@ -459,12 +459,12 @@
CVE-2014-8293 (Cross-site scripting (XSS) vulnerability in Voice Of Web
AllMyGuests ...)
NOT-FOR-US: Voice Of Web AllMyGuests
CVE-2014-8764 (DokuWiki 2014-05-05a and earlier, when using Active Directory
for LDAP ...)
- - dokuwiki <unfixed> (bug #766545)
+ - dokuwiki 0.0.20140929.a-1 (bug #766545)
[squeeze] - dokuwiki <no-dsa> (Will be fixed at the php level)
NOTE: only fixed in Security Hotfix 2014-05-05b
NOTE: Better fixed at the php5 level:
http://git.php.net/?p=php-src.git;a=commitdiff;h=ad1b9eef98df53adefa0c79c02e5dc1f2b928b8c
CVE-2014-8763 (DokuWiki before 2014-05-05b, when using Active Directory for
LDAP ...)
- - dokuwiki <unfixed> (bug #766545)
+ - dokuwiki 0.0.20140929.a-1 (bug #766545)
[squeeze] - dokuwiki <no-dsa> (Will be fixed at the php level)
NOTE: only fixed in Security Hotfix 2014-05-05b
NOTE: Better fixed at the php5 level:
http://git.php.net/?p=php-src.git;a=commitdiff;h=ad1b9eef98df53adefa0c79c02e5dc1f2b928b8c
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
