Secure testing commits - Mar 2009 - r11336 - data/CVE

Author: white
Date: 2009-03-06 11:46:06 +0000 (Fri, 06 Mar 2009)
New Revision: 11336

Modified:
   data/CVE/list
Log:
sgml2x temp file issue CVEified

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-06 11:43:08 UTC (rev 11335)
+++ data/CVE/list	2009-03-06 11:46:06 UTC (rev 11336)
@@ -135,7 +135,8 @@
 CVE-2008-6398 (sng_regress in SNG 1.0.2 allows local users to overwrite
arbitrary ...)
 	- sng 1.0.2-6 (bug #496407; unimportant)
 CVE-2008-6397 (rlatex in AlcoveBook sgml2x 1.0.0 allows local users to
overwrite ...)
-	TODO: check
+	- sgml2x 1.0.0-11.2 (bug #496368; low)
+	[etch] - sgml2x <no-dsa> (Minor issue)
 CVE-2008-6396 (Cross-site scripting (XSS) vulnerability in account.php in
Celerondude ...)
 	NOT-FOR-US: Celerondude Uploader
 CVE-2008-6395 (The web management interface in 3Com Wireless 8760 Dual Radio
11a/b/g ...)
@@ -8126,9 +8127,6 @@
 CVE-2008-4944 (writtercontrol in cdcontrol 1.90 allows local users to overwrite
...)
 	- cdcontrol <removed> (low; bug #496438)
 	[etch] - cdcontrol <no-dsa> (Minor issue)
-CVE-2008-XXXX [sgml2x: insecure temp file]
-	- sgml2x 1.0.0-11.2 (low; bug #496368)
-	[etch] - sgml2x <no-dsa> (Minor issue)
 CVE-2008-4951 (dtc 0.29.6 allows local users to overwrite arbitrary files via a
...)
 	- dtc 0.29.10-1 (low; bug #496362)
 CVE-2008-4994 (The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows
local ...)