[Secure-testing-commits] r7692 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-12-22 14:37:30 +0000 (Sat, 22 Dec 2007)
New Revision: 7692

Modified:
   data/CVE/list
Log:
new issue: cupsys (CVE-2007-5849)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-22 13:59:35 UTC (rev 7691)
+++ data/CVE/list	2007-12-22 14:37:30 UTC (rev 7692)
@@ -1613,9 +1613,10 @@
 CVE-2007-5850 (Heap-based buffer overflow in Desktop Services in Apple Mac OS X ...)
 	NOT-FOR-US: Desktop Services (Apple Mac OS X)
 CVE-2007-5849 (Integer underflow in the asn1_get_string function in the SNMP back end ...)
-	TODO: check
+	- cupsys <unfixed> (medium; bug #457453)
+	[sarge] - cupsys <not-affected> (Vulnerable code not present)
 CVE-2007-5848 (Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin ...)
-	TODO: check
+	- cupsys <not-affected> (Mac driver specific problem)
 CVE-2007-5847 (Race condition in the CFURLWriteDataAndPropertiesToResource API in ...)
 	NOT-FOR-US: Core Foundation (Apple Mac OS X)
 CVE-2007-5846 (The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote ...)