[Secure-testing-commits] r6900 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-10 15:34:56 +0000 (Wed, 10 Oct 2007)
New Revision: 6900

Modified:
   data/CVE/list
Log:
CVE-2007-4924 fixed in ekiga 2.0.11-1
CVE-2005-4791 and CVE-2005-4790 non-issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-10 15:26:53 UTC (rev 6899)
+++ data/CVE/list	2007-10-10 15:34:56 UTC (rev 6900)
@@ -954,7 +954,7 @@
 CVE-2007-4925 (The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment ...)
 	NOT-FOR-US: eWire Payment Client
 CVE-2007-4924 (The Open Phone Abstraction Library (opal), as used by (1) Ekiga before ...)
-	TODO: check
+	- ekiga 2.0.11-1 (low)
 CVE-2007-4923 (PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in ...)
 	NOT-FOR-US: Joomla extension
 CVE-2007-4922 (SQL injection vulnerability in play.php in the jeuxflash 1.0 module ...)
@@ -24207,9 +24207,14 @@
 CVE-2006-2019 (Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows ...)
 	NOT-FOR-US: Apple
 CVE-2005-4791 (Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 ...)
-	TODO: check
+	- liferea <unfixed> (unimportant)
+	- banshee <unfixed> (unimportant)
+	NOTE: unlikly to be exploitable, the path is checked from left to right
 CVE-2005-4790 (Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and ...)
-	TODO: check
+	- tomboy <unfixed> (unimportant)
+	- blam <unfixed> (unimportant)
+	- beagle <unfixed> (unimportant)
+	NOTE: unlikly to be exploitable, the path is checked from left to right
 CVE-2005-4789 (resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, ...)
 	- resmgr <not-affected>
 CVE-2005-4788 (resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, ...)