[Secure-testing-commits] r6196 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-07-31 13:59:52 +0000 (Tue, 31 Jul 2007)
New Revision: 6196

Modified:
   data/CVE/list
Log:
* File Debian bug report for CVE-2007-2438 (vim) and point to upstream patches

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-07-31 13:11:10 UTC (rev 6195)
+++ data/CVE/list	2007-07-31 13:59:52 UTC (rev 6196)
@@ -3801,7 +3801,7 @@
 CVE-2007-2439 (Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for ...)
 	NOT-FOR-US: Caucho Resin Professional
 CVE-2007-2438 (The sandbox for vim allows dangerous functions such as (1) writefile, ...)
-	- vim <unfixed> (medium)
+	- vim <unfixed> (bug #435401; medium)
 	TODO: File bug
 	NOTE: Exploitable through modelines.
 CVE-2007-2437 (The X render (Xrender) extension in X.org X Window System 7.0, 7.1, ...)