[Secure-testing-commits] r7064 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-22 13:36:02 +0000 (Mon, 22 Oct 2007)
New Revision: 7064

Modified:
   data/CVE/list
Log:
CVE-2006-6772 does not affect w3mmee


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-22 12:58:08 UTC (rev 7063)
+++ data/CVE/list	2007-10-22 13:36:02 UTC (rev 7064)
@@ -14274,8 +14274,8 @@
 	NOT-FOR-US: Fishyshoop
 CVE-2006-6772 (Format string vulnerability in the inputAnswer function in file.c in ...)
 	- w3m 0.5.1-5.1 (bug #404564; low)
+	- w3mmee <not-affected> (Does not include this format string vuln in the code)
 	[sarge] - w3m <no-dsa> (Minor issue, only exploitable in dump mode)
-	TODO: Check w3mee, is this forked version still needed?
 CVE-2006-6771 (Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 ...)
 	NOT-FOR-US: Irokez CMS
 CVE-2006-6770 (Multiple PHP remote file inclusion vulnerabilities in Jinzora Media ...)