[Secure-testing-commits] r6945 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-14 09:59:29 +0000 (Sun, 14 Oct 2007)
New Revision: 6945

Modified:
   data/CVE/list
Log:
CVE-2007-4995 fixed in openssl 0.9.8f-1, sarge not-affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-14 09:44:50 UTC (rev 6944)
+++ data/CVE/list	2007-10-14 09:59:29 UTC (rev 6945)
@@ -1018,9 +1018,10 @@
 	NOTE: Gaim not affected, vulnerable code was introduced in 2.2.0
 CVE-2007-4995 [remote code execution in openssl 0.9.8 DTLS]
 	RESERVED
-	- openssl <unfixed> (medium)
+	- openssl 0.9.8f-1 (medium)
 	- openssl097 <not-affected>
 	- openssl096 <not-affected>
+	[sarge] - openssl <not-affected> (vulnerable code introduced later referring to maintainer)
 CVE-2007-4994
 	RESERVED
 CVE-2007-4993 (pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a ...)