[Secure-testing-commits] r7350 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2007-11-18 13:51:14 +0000 (Sun, 18 Nov 2007)
New Revision: 7350

Modified:
   data/CVE/list
Log:
cups/sarge not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-18 13:43:16 UTC (rev 7349)
+++ data/CVE/list	2007-11-18 13:51:14 UTC (rev 7350)
@@ -4760,6 +4760,7 @@
 CVE-2007-4351 (Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 ...)
 	{DTSA-81-1}
 	- cupsys 1.3.4-1 (medium; bug #448866)
+	[sarge] - cupsys <not-affected> (Only vulnerable to code injection since 1.2.x, effects are harmless otherwise)
 CVE-2007-4350
 	RESERVED
 CVE-2007-4349
@@ -5706,7 +5707,7 @@
 CVE-2007-3920 (GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not ...)
 	{DTSA-75-1}
 	- gnome-screensaver 2.20.0-1.1
-	- compiz <unfixed> (bug #449108; high)
+	- compiz <unfixed> (bug #449108; medium)
 CVE-2007-3919 ((1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local ...)
 	{DSA-1395-1}
 	TODO: check