Author: nion Date: 2008-05-08 17:33:37 +0000 (Thu, 08 May 2008) New Revision: 8745 Modified: data/CVE/list Log: CVE-2008-2109 fixed libid3tag 0.15.1b-8 Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-05-08 16:19:19 UTC (rev 8744) +++ data/CVE/list 2008-05-08 17:33:37 UTC (rev 8745) @@ -7,7 +7,8 @@ CVE-2008-2110 (Unrestricted file upload vulnerability in qtofm.php in QTOFileManager ...) NOT-FOR-US: QTOFileManager CVE-2008-2109 (field.c in the libid3tag 0.15.0b library allows context-dependent ...) - - libid3tag <unfixed> (low; bug #480187) + - libid3tag 0.15.1b-8 (low; bug #480187) + NOTE: totally different approach to fix the bug, see Kurts comments in the bug report CVE-2008-2108 (The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, ...) - php5 <unfixed> (low) - php4 <unfixed> (low)