[Secure-testing-commits] r6348 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-17 13:38:18 +0000 (Fri, 17 Aug 2007)
New Revision: 6348

Modified:
   data/CVE/list
Log:
NFUs
sysstat not affected by CVE-2007-3852


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-17 12:36:43 UTC (rev 6347)
+++ data/CVE/list	2007-08-17 13:38:18 UTC (rev 6348)
@@ -1010,7 +1010,7 @@
 CVE-2007-3891 (Unspecified vulnerability in Windows Vista Weather Gadgets in Windows ...)
 	NOT-FOR-US: Windows Vista
 CVE-2007-3890 (Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2007-3889 (Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and ...)
 	NOT-FOR-US: Insanely Simple Blog
 CVE-2007-3888 (Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple ...)
@@ -1092,7 +1092,7 @@
 CVE-2007-3853 (Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and ...)
 	NOT-FOR-US: Oracle
 CVE-2007-3852 (The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates ...)
-	TODO: check
+	- sysstat <not-affected> (We have our own init script not prone to this vulnerability)
 CVE-2007-3851 (The drm/i915 component in the Linux kernel before 2.6.22.2, when used ...)
 	{DSA-1356-1}
 	TODO: check
@@ -1343,7 +1343,7 @@
 CVE-2007-3745 (The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 ...)
 	NOT-FOR-US: Apple Mac OS X
 CVE-2007-3744 (Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac OSX
 CVE-2007-3743 (Stack-based buffer overflow in bookmark handling in Apple Safari 3 ...)
 	NOT-FOR-US: Apple Safari
 CVE-2007-3742 (WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before ...)