[Secure-testing-commits] r3299 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-01-16 10:31:40 +0000 (Mon, 16 Jan 2006)
New Revision: 3299

Modified:
   data/CVE/list
Log:
new knowledgetree issue
no-dsa for spamassassin


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-15 15:16:06 UTC (rev 3298)
+++ data/CVE/list	2006-01-16 10:31:40 UTC (rev 3299)
@@ -1,3 +1,5 @@
+CVE-2006-XXXX [knowledgetree information disclosure]
+	- knowledgetree <unfixed> (bug #348306; medium)
 CVE-2006-XXXX [php5 response splitting]
 	- php5 <unfixed> (bug #347894)
 	- php4 <not-affected> (vulnerable code was introduced in PHP5)
@@ -3759,8 +3761,8 @@
 	NOTE: Means oldstable and stable are affected
 CVE-2005-3351 (SpamAssassin 3.0.4 allows attackers to bypass spam detection via an ...)
 	- spamassassin 3.1.0a-1 (bug #339526; low)
-	NOTE: The DoS is only effective for the single message containing the crafted
-	NOTE: To: line, not for the whole process
+	[sarge] - spamassassin <no-dsa> (DoS affects only a single message)
+	[woody] - spamassassin <no-dsa> (DoS affects only a single message)
 CVE-2005-3350 (libungif library before 4.1.0 allows attackers to corrupt memory and ...)
 	{DSA-890-1}
 	- libungif4 4.1.3-4 (bug #337972; high)