Secure testing commits - Dec 2008 - r10802 - data/CVE

Author: jmm-guest
Date: 2008-12-25 22:12:43 +0000 (Thu, 25 Dec 2008)
New Revision: 10802

Modified:
   data/CVE/list
Log:
mark stable updates as TODO, otherwise they show up as vulnerable
  until the release of the point update


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-25 21:48:34 UTC (rev 10801)
+++ data/CVE/list	2008-12-25 22:12:43 UTC (rev 10802)
@@ -808,6 +808,7 @@
 CVE-2008-5376 (editcomment in crip 3.7 allows local users to overwrite
arbitrary ...)
 	- crip 3.7-5 (low; bug #509275)
 	[etch] - crip <no-dsa> (Not run as root)
+        TODO: next point release: [etch] - crip 3.7-3+etch1
 CVE-2008-5375 (cmus-status-display in cmus 2.2.0 allows local users to
overwrite ...)
 	- cmus <unfixed> (low; bug #509277)
 	[etch] - cmus <no-dsa> (Not run as root)
@@ -3564,7 +3565,8 @@
 	- lustre 1.6.5.1-1 (low; bug #496371)
 CVE-2008-4247 (ftpd in OpenBSD 4.3, FreeBSD 7.0, and NetBSD 4.0 interprets long
...)
 	- linux-ftpd-ssl 0.17.27+0.3-3 (bug #500518)
-	[etch] - linux-ftpd-ssl 0.17.18+0.3-6etch1
+        [etch] - linux-ftpd-ssl <no-dsa> (Minor issue)
+	TODO: next point release [etch] - linux-ftpd-ssl 0.17.18+0.3-6etch1
 	- linux-ftpd 0.17-29 (bug #500278)
 	[etch] - linux-ftpd <no-dsa> (Minor issue)
 CVE-2008-XXXX [possible script injection via /etc/wordpress/wp-config.php]