[Secure-testing-commits] r6182 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2007-07-26 22:07:30 +0000 (Thu, 26 Jul 2007)
New Revision: 6182

Modified:
   data/CVE/list
Log:
the other bind issue doesn't affect sarge or etch


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-07-26 21:28:53 UTC (rev 6181)
+++ data/CVE/list	2007-07-26 22:07:30 UTC (rev 6182)
@@ -2467,7 +2467,9 @@
 CVE-2007-2926 (ISC BIND 9 through 9.5.0a5 uses a weak random number generator during ...)
 	- bind9 <unfixed>
 CVE-2007-2925 (The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and ...)
-	TODO: check
+	- bind9 <unfixed> (medium)
+	[etch] - bind9 <not-affected> (Only 9.4.x and 9.5.x are affected)
+	[sarge] - bind9 <not-affected> (Only 9.4.x and 9.5.x are affected)
 CVE-2007-2924 (Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX ...)
 	NOT-FOR-US: RealNetworks GameHouse
 CVE-2007-2923 (The launch method in the LocalExec ActiveX control (LocalExec.ocx) in ...)