[Secure-testing-commits] r6288 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-08-13 10:46:02 +0000 (Mon, 13 Aug 2007)
New Revision: 6288

Modified:
   data/CVE/list
Log:
Inform lha maintainer about CVE and patch

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-13 09:51:31 UTC (rev 6287)
+++ data/CVE/list	2007-08-13 10:46:02 UTC (rev 6288)
@@ -5071,7 +5071,7 @@
 CVE-2007-2031 (Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, ...)
 	NOT-FOR-US: 3proxy
 CVE-2007-2030 (lharc.c in lha does not securely create temporary files, which might ...)
-	- lha <unfixed> (low)
+	- lha <unfixed> (bug #437621; low)
 	[sarge] - lha <no-dsa> (Non-free not supported)
 	[etch] - lha <no-dsa> (Non-free not supported)
 CVE-2007-2029 (File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) ...)