[Secure-testing-commits] r4352 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-07-08 03:32:51 +0000 (Sat, 08 Jul 2006)
New Revision: 4352

Modified:
   data/CVE/list
Log:
* CVE-2006-3334 (libpng): bug number
* CVE-2006-3320 (sitebar): bug number


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-07-08 02:16:33 UTC (rev 4351)
+++ data/CVE/list	2006-07-08 03:32:51 UTC (rev 4352)
@@ -35,7 +35,7 @@
 CVE-2006-3335 (Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, ...)
 	NOT-FOR-US: HP-UX
 CVE-2006-3334 (Buffer overflow in the png_decompress_chunk function in pngrutil.c in ...)
-	- libpng <unfixed> (bug filed; high)
+	- libpng <unfixed> (bug #377298; high)
 CVE-2006-3333 (Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum ...)
 	NOT-FOR-US: Zorum Forum
 CVE-2006-3332 (SQL injection vulnerability in index.php in Zorum Forum 3.5 allows ...)
@@ -63,7 +63,7 @@
 CVE-2006-3321 (Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp ...)
 	NOT-FOR-US: OpenForum
 CVE-2006-3320 (Cross-site scripting (XSS) vulnerability in command.php in SiteBar ...)
-	- sitebar <unfixed> (bug filed; low)
+	- sitebar <unfixed> (bug #377299; low)
 CVE-2006-3319 (Cross-site scripting (XSS) vulnerability in rss/index.php in PHP ...)
 	TODO: check
 CVE-2006-3318 (SQL injection vulnerability in register.php for phpRaid 3.0.6 and ...)