[Secure-testing-commits] r5544 - data/CVE

[Florian Weimer]

Author: fw
Date: 2007-03-14 18:43:05 +0000 (Wed, 14 Mar 2007)
New Revision: 5544

Modified:
   data/CVE/list
Log:
CVE-2007-1253: blender in sarge is not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-03-14 09:14:19 UTC (rev 5543)
+++ data/CVE/list	2007-03-14 18:43:05 UTC (rev 5544)
@@ -486,6 +486,8 @@
 	NOT-FOR-US: Connectix Boards
 CVE-2007-1253 (Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script ...)
 	- blender <unfixed> (medium)
+	[sarge] - blender <not-affected> (bug was introduced in version 2.42)
+	NOTE: http://lists.alioth.debian.org/pipermail/secure-testing-team/2007-March/001095.html
 CVE-2007-1252 (Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch ...)
 	NOT-FOR-US: Symantec Mail Security
 CVE-2007-1251 (Format string vulnerability in the new_warning function in ...)