Secure testing commits - Apr 2008 - r8475 - data/CVE

Author: jmm-guest
Date: 2008-04-03 21:55:23 +0000 (Thu, 03 Apr 2008)
New Revision: 8475

Modified:
   data/CVE/list
Log:
reassign to kernel package
while labeled as an Apache flaw, this needs to be fixed in smbfs



Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-04-03 20:25:49 UTC (rev 8474)
+++ data/CVE/list	2008-04-03 21:55:23 UTC (rev 8475)
@@ -4026,8 +4026,10 @@
 CVE-2007-6508 (Directory traversal vulnerability in view.php in xeCMS 1.0
allows ...)
 	NOT-FOR-US: xeCMS
 CVE-2007-6514 (Apache HTTP Server, when running on Linux with a document root
on a ...)
-	- apache <unfixed> (low)
-	- apache2 <unfixed> (low)
+	- linux-2.6 <unfixed> 
+        NOTE: While labeled as an Apache flaw, this needs to be fixed in smbfs
+	NOTE: This is likely already fixed in recent kernels, but we need to pin point
+        NOTE: a fixed version
 CVE-2007-XXXX [venkman preinst symlink dos]
 	- venkman 0.9.87.2-1 (bug #456520)
 	[lenny] - venkman <not-affected> (Vulnerable code not present)