[Secure-testing-commits] r6353 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-18 12:14:30 +0000 (Sat, 18 Aug 2007)
New Revision: 6353

Modified:
   data/CVE/list
Log:
CVE-2007-4321 fixed in 0.8-4, partially fixed means adressed the log injections in the CVE

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-17 21:14:07 UTC (rev 6352)
+++ data/CVE/list	2007-08-18 12:14:30 UTC (rev 6353)
@@ -106,8 +106,7 @@
 CVE-2007-4322 (BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) ...)
 	NOT-FOR-US: BlockHosts
 CVE-2007-4321 (fail2ban 0.8 and earlier does not properly parse sshd log files, which ...)
-	- fail2ban <unfixed> (bug #438187; medium)
-	NOTE: only partially fixed in 0.8.0-4 according to maintainer
+	- fail2ban 0.8.0-4 (bug #438187; medium)
 CVE-2007-4320 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Ncaster
 CVE-2007-4319 (The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel ...)