[Secure-testing-commits] r3236 - data/CVE

[Micah Anderson]

Author: micah
Date: 2006-01-06 00:04:59 +0000 (Fri, 06 Jan 2006)
New Revision: 3236

Modified:
   data/CVE/list
Log:
Change a blender woody issue to no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-05 22:34:37 UTC (rev 3235)
+++ data/CVE/list	2006-01-06 00:04:59 UTC (rev 3236)
@@ -418,7 +418,8 @@
 	NOT-FOR-US: Avaya Modular Messaging Message Storage Server
 CVE-2005-4470 (Heap-based buffer overflow in the get_bhead function in readfile.c in ...)
 	- blender 2.40-1 (bug #344398; medium)
-	NOTE: Sarge is vulnerable, Woody has it in non-free (tag no-dsa? or unaffected?)
+	[woody] - blender <no-dsa> (Woody has it in non-free and it is binary-only)
+	NOTE: Sarge is vulnerable
 CVE-2005-4469 (Multiple direct static code injection vulnerabilities in PHPGedView ...)
 	NOT-FOR-US: PHPGedView
 CVE-2005-4468 (PHP remote file include vulnerability in help_text_vars.php in ...)