[Secure-testing-commits] r6427 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-29 13:33:16 +0000 (Wed, 29 Aug 2007)
New Revision: 6427

Modified:
   data/CVE/list
Log:
marked CVE-2007-3841 as fixed and added note about it


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-29 10:31:00 UTC (rev 6426)
+++ data/CVE/list	2007-08-29 13:33:16 UTC (rev 6427)
@@ -1614,7 +1614,11 @@
 CVE-2007-3842 (Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise ...)
 	NOT-FOR-US: 8e6 R3000 Enterprise Filter
 CVE-2007-3841 (Unspecified vulnerability in Pidgin (formerly Gaim) 2.0.2 for Linux ...)
-	- pidgin <unfixed>
+	- pidgin 2.1.0-1 (medium)
+	NOTE: this information is based upon a vague advisory by a vulnerability
+	NOTE: information sales organization that does not coordinate with vendors or
+	NOTE: release actionable advisories. So maybe it is not fixed _but_ since it is
+	NOTE: not disclosed it would be hard to fix and track it.
 CVE-2007-3840 (SQL injection vulnerability in referralUrl.php in Traffic Stats allows ...)
 	NOT-FOR-US: Traffic Stats
 CVE-2007-3839 (Cross-site scripting (XSS) vulnerability in takeprofedit.php in ...)