[Secure-testing-commits] r4190 - data/CVE

Alec Berryman
Tue, 13 Jun 2006 01:46:47 -0000

Author: alec-guest
Date: 2006-06-13 01:46:11 +0000 (Tue, 13 Jun 2006)
New Revision: 4190

Modified:
   data/CVE/list
Log:
* fix typo
* libspf isn''t affected


Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-06-13 01:40:38 UTC (rev 4189)
+++ data/CVE/list	2006-06-13 01:46:11 UTC (rev 4190)
@@ -3418,7 +3418,8 @@
 CVE-2006-1521
 	RESERVED
 CVE-2006-1520 (Format string vulnerability in ANSI C Sender Policy Framework
library ...)
-	- libspf <unfixed> (bug #368780; low)
+	NOTE: Debian ships debugging disabled (this isn''t a problem with a
debugging command-line flag)
+	- libspf <not-affected> (bug #368780; low)
 CVE-2006-1519
 	REJECTED
 CVE-2006-1518 (Buffer overflow in the open_table function in sql_base.cc in
MySQL ...)
@@ -6246,7 +6247,7 @@
 CVE-2006-0323 (Buffer overflow in swfformat.dll in multiple RealNetworks
products and ...)
 	NOT-FOR-US: Real Player (initial advisory claimed Helix affected, which is
incorrect
 CVE-2006-0322 (Unspecified vulnerability the edit comment formatting
functionality in ...)
-	- mediawiki <1.4.15-1> (low)
+	- mediawiki 1.4.15-1 (low)
 CVE-2005-4666 (Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3
Beta1 ...)
 	NOT-FOR-US: PHlyMail
 CVE-2006-0353 (unix_random.c in lshd for lsh 2.0.1 leaks file descriptors
related to ...)