Secure testing commits - Jun 2008 - r9077 - data/CVE

Author: jmm-guest
Date: 2008-06-16 13:46:13 +0000 (Mon, 16 Jun 2008)
New Revision: 9077

Modified:
   data/CVE/list
Log:
freetype fixed
django scheduled for point release


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-06-15 21:14:16 UTC (rev 9076)
+++ data/CVE/list	2008-06-16 13:46:13 UTC (rev 9077)
@@ -1105,6 +1105,8 @@
 	NOTE: See CVE-2004-2265, where the problem occured as well
 CVE-2008-2302 (Cross-site scripting (XSS) vulnerability in the login form in
the ...)
 	- python-django 0.96.2-1 (bug #481164; low)
+	[etch] - python-django <no-dsa> (Minor issue)
+	TODO: next point release: [etch] - python-django 0.95.1-1etch1
 CVE-2008-2162 (Cross-site scripting (XSS) vulnerability in SonicWall Email
Security ...)
 	NOT-FOR-US: SonicWall Email Security
 CVE-2008-2161 (Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and
possibly ...)
@@ -1914,13 +1916,13 @@
 	RESERVED
 CVE-2008-1808 [two heap overflows in PFB and TTF font parsing routine]
 	RESERVED
-	- freetype <unfixed> (low; bug #485841)
+	- freetype 2.3.6-1 (low; bug #485841)
 CVE-2008-1807 [heap overflow in PFB font parsing routine]
 	RESERVED
-	- freetype <unfixed> (medium; bug #485841)
+	- freetype 2.3.6-1 (medium; bug #485841)
 CVE-2008-1806 [heap overflow in PFB font parsing routine]
 	RESERVED
-	- freetype <unfixed> (medium; bug #485841)
+	- freetype 2.3.6-1 (medium; bug #485841)
 CVE-2008-1805 (Incomplete blacklist vulnerability in Skype 3.6.0.248, and other
...)
 	NOT-FOR-US: Skype
 CVE-2008-1804 (preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does
not ...)