[Secure-testing-commits] r4908 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-11-01 23:34:40 +0100 (Wed, 01 Nov 2006)
New Revision: 4908

Modified:
   data/CVE/list
Log:
new rpm issue, probably bogus


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-11-01 20:14:19 UTC (rev 4907)
+++ data/CVE/list	2006-11-01 22:34:40 UTC (rev 4908)
@@ -358,8 +358,11 @@
 	- wireshark 0.99.4-1 (bug #396258; medium)
 CVE-2006-5467 (The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a ...)
 	TODO: check
-CVE-2006-5466
+CVE-2006-5466 [rpm heap overflow in changelog parsing]
 	RESERVED
+	- rpm <unfixed> (low)
+	NOTE: This needs further investigation, most probably a non-issue, pinged maintainer
+	NOTE: [sarge] - rpm <no-dsa> (You need to trust the RPMs you're installing)
 CVE-2006-5465
 	RESERVED
 CVE-2006-5464