[Secure-testing-commits] r5969 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-06-02 08:38:18 +0000 (Sat, 02 Jun 2007)
New Revision: 5969

Modified:
   data/CVE/list
Log:
- we have knowledgetree in unstable
- remove clamav duplicate


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-06-02 08:20:16 UTC (rev 5968)
+++ data/CVE/list	2007-06-02 08:38:18 UTC (rev 5969)
@@ -250,7 +250,8 @@
 CVE-2007-2850 (The Session Reliability Service (XTE) in Citrix MetaFrame Presentation ...)
 	NOT-FOR-US: Citrix
 CVE-2007-2849 (KnowledgeTree Document Management (aka KnowledgeTree Open Source) ...)
-	NOT-FOR-US: KnowledgeTree
+	- knowledgetree <unfixed>
+	TODO: file bug
 CVE-2007-2848 (Stack-based buffer overflow in the SetPath function in the shComboBox ...)
 	NOT-FOR-US: Sky Software
 CVE-2007-2847 (Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in ...)
@@ -1887,10 +1888,6 @@
 	- mixmaster 3.0b2-5 (low; bug #418662)
 	[etch] - mixmaster 3.0b2-4.etch1
 	[sarge] - mixmaster <not-affected> (Code generation in Sarge pads over this)
-CVE-2007-XXXX [unspecified vulnerability in Clamav's PDF parser]
-	- clamav 0.90.2-1 (unimportant; bug #418849)
-	NOTE: closed report: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=459
-	NOTE: Commit r3021 looks as if it's just a null pointer dereference.
 CVE-2007-XXXX [heap-based buffer overflow in git-blame with long file names]
 	- git-core 1.5.1.2-1 (low)
 	NOTE: http://git.kernel.org/?p=git/git.git;a=commit;h=1bb88be99e4fdedcd5cc5292c11b566a00028deb