[Secure-testing-commits] r6605 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-13 12:54:13 +0000 (Thu, 13 Sep 2007)
New Revision: 6605

Modified:
   data/CVE/list
Log:
CVE-2007-4826 of quagga fixed in 0.99.9-1, bug 442133
CVE-2007-2692 marked as fixed in 5.0.45-1, added NOTE


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-12 23:29:17 UTC (rev 6604)
+++ data/CVE/list	2007-09-13 12:54:13 UTC (rev 6605)
@@ -4954,11 +4954,12 @@
 	[sarge] - mysql-dfsg-4.1 <not-affected> (bug #424830)
 	[sarge] - mysql-dfsg <not-affected>
 CVE-2007-2692 (The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x ...)
-	- mysql-dfsg-5.0 <not-affected> (bug #424778)
+	- mysql-dfsg-5.0 5.0.45-1 (bug #424778)
 	[sarge] - mysql-dfsg-4.1 <unfixed> (bug #424830)
 	[sarge] - mysql-dfsg <not-affected>
 	NOTE: the CVE says it's fixed in 5.0.40, but 5.0.41 is vulnerable
 	NOTE: http://bugs.mysql.com/bug.php?id=28499
+	NOTE: seanius told me that this bug is fixed in unstable
 CVE-2007-2691 (MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does ...)
 	- mysql-dfsg-5.0 5.0.41a-1 (bug #424778)
 	[sarge] - mysql-dfsg-4.1 <unfixed> (bug #424830)