[Secure-testing-commits] r4054 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-05-22 22:14:47 +0000 (Mon, 22 May 2006)
New Revision: 4054

Modified:
   data/CVE/list
Log:
* PEAR::Archive_Tar is distributed with php-pear and is unfixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-05-22 21:56:05 UTC (rev 4053)
+++ data/CVE/list	2006-05-22 22:14:47 UTC (rev 4054)
@@ -3694,7 +3694,7 @@
 CVE-2006-0932 (Directory traversal vulnerability in zip.lib.php 0.1.1 in ...)
 	NOT-FOR-US: zip.lib.php
 CVE-2006-0931 (Directory traversal vulnerability in PEAR::Archive_Tar 1.2 allows ...)
-	TODO: check, whether this is included in PEAR from PHP
+	- php5 <unfixed> (bug filed; low)
 CVE-2006-0930 (Directory traversal vulnerability in Webmail in ArGoSoft Mail Server ...)
 	NOT-FOR-US: ArgoSoft Mail Server
 CVE-2006-0929 (Directory traversal vulnerability in the IMAP server in ArGoSoft Mail ...)