Secure testing commits - Nov 2008 - r10504 - data/CVE

Author: jmm-guest
Date: 2008-11-28 20:07:56 +0000 (Fri, 28 Nov 2008)
New Revision: 10504

Modified:
   data/CVE/list
Log:
- gcjwebplugin issue doesn''t affected etch
- one pidgin issue fixed


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-11-28 19:28:33 UTC (rev 10503)
+++ data/CVE/list	2008-11-28 20:07:56 UTC (rev 10504)
@@ -5719,7 +5719,7 @@
 	- openldap2.3 <removed> (low; bug #488710)
 	- openldap 2.4.10-3 (low; bug #488710)
 CVE-2008-2955 (Pidgin 2.4.1 allows remote attackers to cause a denial of
service ...)
-	- pidgin <unfixed> (low; bug #488632)
+	- pidgin 2.4.3-1 (low; bug #488632)
 	- gaim 1:2.0.0+fake.1
 	NOTE: gaim is now a transitional package depending on pidgin with its own
source package
 CVE-2008-2956 (Memory leak in Pidgin 2.0.0, and possibly other versions, allows
...)
@@ -52488,6 +52488,7 @@
 	- mldonkey 2.5.28.1-1 (bug #300560; low)
 CVE-2005-XXXX [Should include "UNRESTRICTED access to your computer"
warning somewhere]
 	- classpath 2:0.92-1 (bug #267040; bug #301134; high)
+        [etch] - classpath <not-affected> (Doesn''t build the
gcjwebplugin binary package)
 CVE-2005-XXXX [Inconsistent escaping of user supplied data in dbauthpgsql.c]
 	- dbmail 2.2.1-1 (bug #290833; medium)
 CVE-2005-2548 (vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote
...)