[Secure-testing-commits] r6794 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-04 20:14:31 +0000 (Thu, 04 Oct 2007)
New Revision: 6794

Modified:
   data/CVE/list
Log:
new issue: CVE-2007-5159 (ntfs-3g), missed it first because it is a symlink in debian


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-04 20:11:21 UTC (rev 6793)
+++ data/CVE/list	2007-10-04 20:14:31 UTC (rev 6794)
@@ -31,7 +31,7 @@
 CVE-2007-5160 (Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche ...)
 	NOT-FOR-US: Thierry Leriche Restaurant Management System
 CVE-2007-5159 (The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g ...)
-	- ntfs-3g <not-affected> (/sbin/mount.ntfs-3g  is installed for group and user root)
+	- ntfs-3g <unfixed> (medium; bug #445315)
 CVE-2007-5158 (The focus handling for the onkeydown event in Microsoft Internet ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2007-5157 (PHP remote file inclusion vulnerability in phfito-post.php in Alex ...)