[Secure-testing-commits] r6361 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-20 13:58:29 +0000 (Mon, 20 Aug 2007)
New Revision: 6361

Modified:
   data/CVE/list
Log:
redhad-cluster 1.03.00 not affected by CVE-2007-3374 and CVE-2007-3373

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-20 13:45:34 UTC (rev 6360)
+++ data/CVE/list	2007-08-20 13:58:29 UTC (rev 6361)
@@ -2230,11 +2230,9 @@
 CVE-2007-3375 (Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows ...)
 	NOT-FOR-US: Lhaca
 CVE-2007-3374 (Buffer overflow in cluster/cman/daemon/daemon.c in cman ...)
-	- redhat-cluster <unfixed> (medium)
-	TODO: File bug
+	- redhat-cluster <not-affected> (Just relevant in newer versions, we don't ship this file)
 CVE-2007-3373 (daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear ...)
-	- redhat-cluster <unfixed> (low)
-	TODO: File bug
+	- redhat-cluster <not-affected> (Just relevant in newer versions, we don't ship this file)
 CVE-2006-7209 (Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA ...)
 	NOT-FOR-US: phpTrafficA
 CVE-2006-7208 (PHP remote file inclusion vulnerability in download.php in the Adam ...)