Secure testing commits - Jun 2008 - r9161 - data/CVE

Author: jmm-guest
Date: 2008-06-25 22:24:39 +0000 (Wed, 25 Jun 2008)
New Revision: 9161

Modified:
   data/CVE/list
Log:
one OO issue not affecting Debian
NFUs


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-06-25 22:19:47 UTC (rev 9160)
+++ data/CVE/list	2008-06-25 22:24:39 UTC (rev 9161)
@@ -437,9 +437,9 @@
 CVE-2008-2641
 	RESERVED
 CVE-2008-2640 (Multiple cross-site scripting (XSS) vulnerabilities in the Flex
3 ...)
-	TODO: check
+	NOT-FOR-US: Adobe Flex
 CVE-2008-2639 (Stack-based buffer overflow in the ODBC server service in Citect
...)
-	TODO: check
+	NOT-FOR-US: Citect CitectSCADA
 CVE-2008-2638 (Static code injection vulnerability in guestbook.php in 1Book
1.0.1 ...)
 	NOT-FOR-US: 1Book
 CVE-2008-2637 (Multiple cross-site scripting (XSS) vulnerabilities in F5
FirePass SSL ...)
@@ -866,9 +866,9 @@
 CVE-2008-2429
 	RESERVED
 CVE-2008-2428 (Multiple SQL injection vulnerabilities in TorrentTrader 1.08
Classic ...)
-	TODO: check
+	NOT-FOR-US: TorrentTrader
 CVE-2008-2427 (Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and
XnView ...)
-	TODO: check
+	NOT-FOR-US: NConvert, GFL SDK, XnView
 CVE-2008-2426 (Multiple stack-based buffer overflows in Imlib 2 (aka imlib2)
1.4.0 ...)
 	{DSA-1594-1}
 	- imlib2 1.4.0-1.1 (medium; bug #483816)
@@ -1001,7 +1001,7 @@
 CVE-2008-2367
 	RESERVED
 CVE-2008-2366 (Untrusted search path vulnerability in a certain Red Hat build
script ...)
-	TODO: check
+	- openoffice.org <not-affected> (RedHat-specific packaging flaw)
 CVE-2008-2365
 	RESERVED
 CVE-2008-2364 (The ap_proxy_http_process_response function in mod_proxy_http.c
in the ...)