Secure testing commits - Dec 2007 - r7521 - data/CVE

Author: jmm-guest
Date: 2007-12-05 21:10:54 +0000 (Wed, 05 Dec 2007)
New Revision: 7521

Modified:
   data/CVE/list
Log:
etch/sarge status of pcre


Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-12-05 21:07:39 UTC (rev 7520)
+++ data/CVE/list	2007-12-05 21:10:54 UTC (rev 7521)
@@ -673,10 +673,16 @@
 	[etch] - pioneers <no-dsa> (Minor issue)	
 CVE-2006-7226 (Perl-Compatible Regular Expression (PCRE) library before 6.7
does not ...)
 	- pcre3 6.7-1
-	- glib2.0 2.14.3-1
+	- glib2.0 2.14.3-1 (unimportant)
+	NOTE: glib only embeds pcre in the udeb, no attack vector
+	[sarge] - pcre3 4.5+7.4-1
+	[etch] - pcre3 6.7+7.4-2
 CVE-2006-7225 (Perl-Compatible Regular Expression (PCRE) library before 6.7
allows ...)
 	- pcre3 6.7-1
-	- glib2.0 2.14.3-1
+	- glib2.0 2.14.3-1 (unimportant)
+	NOTE: glib only embeds pcre in the udeb, no attack vector
+	[sarge] - pcre3 4.5+7.4-1
+	[etch] - pcre3 6.7+7.4-2
 CVE-2004-2753 (Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11,
and ...)
 	NOT-FOR-US: HP-UX
 CVE-2004-2752 (Cross-site scripting (XSS) vulnerability in the Downloads module
in ...)