[Secure-testing-commits] r7109 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-26 16:18:27 +0000 (Fri, 26 Oct 2007)
New Revision: 7109

Modified:
   data/CVE/list
Log:
added xscreensaver to CVE-2007-5585 + comments


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-26 13:17:26 UTC (rev 7108)
+++ data/CVE/list	2007-10-26 16:18:27 UTC (rev 7109)
@@ -323,9 +323,11 @@
 CVE-2007-5586 (Unspecified vulnerability in a driver in Microsoft Windows XP SP2 and ...)
 	NOT-FOR-US: Microsoft Windows
 CVE-2007-5585 (xscreensaver 5.03 and earlier, when running without ...)
+	- xscreensaver <unfixed> (medium; bug #448157)
 	- rss-glx <unfixed> (medium; bug #448157)
 	NOTE: xscreensaver is not segfaulting on my system but exiting in this scenario
-	NOTE: this is more a packaging issue, rss-glx should depend on xscreensaver-gl
+	NOTE: while this needs to be fixed by a different error handling in xscreensaver
+	NOTE: in rss-glx this can be workarounded via a dependency on xscreensaver-gl
 CVE-2007-5584
 	RESERVED
 CVE-2007-5583