[Secure-testing-commits] r5839 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-05-15 16:26:42 +0000 (Tue, 15 May 2007)
New Revision: 5839

Modified:
   data/CVE/list
Log:
CVE-2006-1549 has not been fixed in php

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-05-15 14:08:32 UTC (rev 5838)
+++ data/CVE/list	2007-05-15 16:26:42 UTC (rev 5839)
@@ -18798,8 +18798,8 @@
 CVE-2006-1551 (Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX ...)
 	NOT-FOR-US: PAJAX
 CVE-2006-1549 (PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation ...)
-	- php4 4:4.4.4-1 (bug #361854; unimportant)
-	- php5 5.1.4-0.1 (bug #361917; unimportant)
+	- php4 <unfixed> (bug #361854; unimportant)
+	- php5 <unfixed> (bug #361917; unimportant)
 	[sarge] - php4 <no-dsa> (there are easier ways to segfault your own program)
 CVE-2005-4767 (BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 ...)
 	NOT-FOR-US: BEA WebLogic