[Secure-testing-commits] r5392 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2007-01-31 23:34:24 +0100 (Wed, 31 Jan 2007)
New Revision: 5392

Modified:
   data/CVE/list
Log:
gforge/sarge not affected
vlc unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-01-31 22:11:14 UTC (rev 5391)
+++ data/CVE/list	2007-01-31 22:34:24 UTC (rev 5392)
@@ -710,7 +710,7 @@
 	- kernel-patch-grsecurity2 2.1.10-1 (bug #407350)
 	NOTE: exploitable as per http://grsecurity.net/pipermail/grsecurity/2007-January/000830.html
 CVE-2007-0256 (VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of ...)
-	- vlc <unfixed> (low; bug #407290)
+	- vlc <unfixed> (unimportant; bug #407290)
 CVE-2007-0255 (XINE 0.99.4 allows user-assisted remote attackers to cause a denial of ...)
 	- xine-ui <unfixed> (low)
 CVE-2007-0254 (Format string vulnerability in the errors_create_window function in ...)
@@ -954,6 +954,7 @@
 	NOTE: vendor advisory: http://sourceforge.net/forum/forum.php?forum_id=652721
 CVE-2007-0176 (Cross-site scripting (XSS) vulnerability in search/advanced_search.php ...)
 	- gforge 4.5.14-20 (low; bug #406244)
+	[sarge] - gforge <not-affected> (Vulnerable code not present)
 CVE-2007-0175 (Cross-site scripting (XSS) vulnerability in htsrv/login.php in ...)
 	- b2evolution <not-affected>
 CVE-2007-0174 (Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ...)