[Secure-testing-commits] r6933 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-13 11:09:26 +0000 (Sat, 13 Oct 2007)
New Revision: 6933

Modified:
   data/CVE/list
Log:
new issue: firebird1.5 CVE-2007-5246, CVE-2007-5245
CVE-2007-5245, CVE-2007-5246 fixed in firebird2.0 2.0.3.12981.ds1-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-13 10:35:23 UTC (rev 6932)
+++ data/CVE/list	2007-10-13 11:09:26 UTC (rev 6933)
@@ -350,9 +350,13 @@
 CVE-2007-5247 (Multiple format string vulnerabilities in the Monolith Lithtech ...)
 	NOT-FOR-US: Monolith engine
 CVE-2007-5246 (Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and ...)
-	TODO: check, previous commit contradicts to advisory
+	- firebird2.0 2.0.3.12981.ds1-1
+	- firebird1.5 <unfixed> (medium; bug #446472)
+	NOTE: firebird1.5 is a removal candidate, see #438862
 CVE-2007-5245 (Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and ...)
-	TODO: check, previous commit contradicts to advisory
+	- firebird2.0 2.0.3.12981.ds1-1
+	- firebird1.5 <unfixed> (medium; bug #446475)
+	NOTE: firebird1.5 is a removal candidate, see #438862
 CVE-2007-5244 (Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through ...)
 	NOT-FOR-US: Borland InterBase
 CVE-2007-5243 (Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 ...)