[Secure-testing-commits] r6346 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2007-08-17 08:20:22 +0000 (Fri, 17 Aug 2007)
New Revision: 6346

Modified:
   data/CVE/list
Log:
CVE-2007-2452: findutils fixed in etch


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-17 00:12:50 UTC (rev 6345)
+++ data/CVE/list	2007-08-17 08:20:22 UTC (rev 6346)
@@ -4378,7 +4378,7 @@
 CVE-2007-2452 (Heap-based buffer overflow in the visit_old_format function in ...)
 	- findutils 4.2.31-1 (low; bug #426862)
 	[sarge] - findutils <no-dsa> (Not vulnerable in default configuration, minor issue)
-	[etch] - findutils <no-dsa> (Not vulnerable in default configuration, minor issue)
+	[etch] - findutils 4.2.28-1etch1 (low)
 CVE-2007-2451 (Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES ...)
 	- linux-2.6 2.6.21-3
 	[etch] - linux-2.6 <not-affected> (Vulnerable code not present, introduced in 2.6.20)