[Secure-testing-commits] r5079 - data/CVE

[Florian Weimer]

Author: fw
Date: 2006-12-06 20:53:27 +0100 (Wed, 06 Dec 2006)
New Revision: 5079

Modified:
   data/CVE/list
Log:
CVE-2006-6235: rather nasty GnuPG issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-06 17:39:46 UTC (rev 5078)
+++ data/CVE/list	2006-12-06 19:53:27 UTC (rev 5079)
@@ -90,8 +90,10 @@
 	NOT-FOR-US: Woltlab Burning Board Lite
 CVE-2006-6236 (Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote ...)
 	TODO: check
-CVE-2006-6235
+CVE-2006-6235 [arbitrary indirect call in GnuPG]
 	RESERVED
+	- gnupg <unfixed> (high; bug #401894; bug #401914)
+	- gnupg2 <unfixed> (high; bug #401895; bug #401913)
 CVE-2006-6234 (Multiple SQL injection vulnerabilities in the Content module in ...)
 	NOT-FOR-US: PHP-Nuke
 CVE-2006-6233 (SQL injection vulnerability in the Downloads module for unknown ...)