[Secure-testing-commits] r7434 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-11-29 12:03:15 +0000 (Thu, 29 Nov 2007)
New Revision: 7434

Modified:
   data/CVE/list
Log:
Information mixed up, ihu unimportant, audacity still valid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-29 11:58:41 UTC (rev 7433)
+++ data/CVE/list	2007-11-29 12:03:15 UTC (rev 7434)
@@ -36,7 +36,8 @@
 CVE-2007-6104 (Cross-site scripting (XSS) vulnerability in the Instant Web Publishing ...)
 	NOT-FOR-US: FileMaker Pro
 CVE-2007-6103 (I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) ...)
-	- ihu <unfixed> (medium; bug #453280)
+	- ihu <unfixed> (unimportant; bug #453280)
+	NOTE: Would only terminate normal phone call by hanging up, not a real security bug
 CVE-2007-6102 (Cross-site scripting (XSS) vulnerability in Feed to JavaScript ...)
 	NOT-FOR-US: feed2js
 CVE-2007-6101 (Ability Mail Server before 2.61 allows remote authenticated users to ...)
@@ -121,8 +122,7 @@
 	- ngircd 0.10.3-1
 	[etch] - ngircd <no-dsa> (Minor issue)
 CVE-2007-6061 (Audacity 1.3.2 creates a temporary directory with a predictable name ...)
-	- audacity <unfixed> (unimportant; bug #453283)
-	NOTE: Would only terminate normal phone call by hanging up, not a real security bug
+	- audacity <unfixed> (bug #453283)
 CVE-2007-6060 (AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a ...)
 	NOT-FOR-US: AhnLab Antivirus 3 Internet Security 2008 Platinum
 CVE-2007-6059 (Javamail does not properly handle a series of invalid login attempts ...)