[Secure-testing-commits] r6632 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-17 23:20:37 +0000 (Mon, 17 Sep 2007)
New Revision: 6632

Modified:
   data/CVE/list
Log:
CVE-2007-4135 unfixed libnfsidmap (low)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-17 22:59:13 UTC (rev 6631)
+++ data/CVE/list	2007-09-17 23:20:37 UTC (rev 6632)
@@ -1721,7 +1721,9 @@
 CVE-2007-4136
 	RESERVED
 CVE-2007-4135 (Unspecified vulnerability in the NFSv4 ID mapper (nfsidmap) on SUSE ...)
-	TODO: check
+	- libnfsidmap <unfixed> (low)
+	TODO: report bug
+	NOTE: the patch fixing this is included in http://ftp.opensuse.org/pub/opensuse/distribution/SL-10.1/inst-source/suse/src/nfsidmap-0.12-16.src.rpm (libnfsidmap-0.12-nouser.patch)
 CVE-2007-4134 (Directory traversal vulnerability in extract.c in star before 1.5a84 ...)
 	- star 1.5a67-1.1 (bug #440100; low)
 CVE-2007-4133