[Secure-testing-commits] r6002 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2007-06-16 08:14:25 +0000 (Sat, 16 Jun 2007)
New Revision: 6002

Modified:
   data/CVE/list
Log:
CVE-2007-3231: mecab
CVE-2007-3227: rails


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-06-15 09:14:07 UTC (rev 6001)
+++ data/CVE/list	2007-06-16 08:14:25 UTC (rev 6002)
@@ -29,7 +29,7 @@
 CVE-2007-3232 (The IBM TotalStorage DS400 with firmware 4.15 uses a blank password ...)
 	TODO: check
 CVE-2007-3231 (Buffer overflow in MeCab before 0.96 has unknown impact and attack ...)
-	TODO: check
+	- mecab <unfixed> (bug #429174)
 CVE-2007-3230 (PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer ...)
 	TODO: check
 CVE-2007-3229 (index.php in Singapore Gallery allows remote attackers to obtain ...)
@@ -37,7 +37,7 @@
 CVE-2007-3228 (PHP remote file inclusion vulnerability in ...)
 	TODO: check
 CVE-2007-3227 (Cross-site scripting (XSS) vulnerability in the to_json function in ...)
-	TODO: check
+	- rails <unfixed> (bug #429177)
 CVE-2007-3226 (Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 ...)
 	TODO: check
 CVE-2007-3225 (Unspecified vulnerability in Sun Java System Directory Server (slapd) ...)