[Secure-testing-commits] r2999 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2005-12-10 23:16:45 +0000 (Sat, 10 Dec 2005)
New Revision: 2999

Modified:
   data/CVE/list
Log:
0.10.13-1 is fixed according to ethereal maint


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-10 21:53:34 UTC (rev 2998)
+++ data/CVE/list	2005-12-10 23:16:45 UTC (rev 2999)
@@ -2367,8 +2367,7 @@
 CVE-2005-3314 (Stack-based buffer overflow in the IMAP deamon in Novell Netmail 3.5.2 ...)
 	NOT-FOR-US: Novell Netmail
 CVE-2005-3313 (The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers ...)
-	- ethereal <unfixed> (bug #334880; medium)
-	TODO: This supposedly fixed after the 13 release, separate bug might be necessary
+	- ethereal 0.10.13-1 (bug #334880; medium)
 CVE-2005-3312 (The HTML rendering engine in Microsoft Internet Explorer 6.0 allows ...)
 	NOT-FOR-US: Microsoft
 CVE-2005-3311 (BMC Software Control-M 6.1.03 for Solaris, and possibly other ...)
@@ -2630,7 +2629,7 @@
 	NOTE: Bug was introduced in a patch to squid-2.5.STABLE10,
 	NOTE: this patch was never applied to the Debian package.
 CVE-2005-XXXX [Lots of vulnerabilities in ethereal]
-	- ethereal <unfixed> (bug #334880; medium)
+	- ethereal 0.10.13-1 (bug #334880; medium)
 CVE-2005-XXXX [libmad: Assertion failed; buffer overflow]
 	- libmad <unfixed> (bug #287519; low)
 	- mad <removed>