[Secure-testing-commits] r8546 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-04-17 14:34:23 +0000 (Thu, 17 Apr 2008)
New Revision: 8546

Modified:
   data/CVE/list
Log:
python fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-04-17 08:55:10 UTC (rev 8545)
+++ data/CVE/list	2008-04-17 14:34:23 UTC (rev 8546)
@@ -227,8 +227,8 @@
 CVE-2008-1722 (Multiple integer overflows in (1) filter/image-png.c and (2) ...)
 	- cupsys <unfixed> (medium; bug #476305)
 CVE-2008-1721 (Integer signedness error in the zlib extension module in Python 2.5.2 ...)
-	- python2.4 <unfixed>
-	- python2.5 <unfixed>
+	- python2.4 2.4.5-2
+	- python2.5 2.5.2-3
 CVE-2008-1719 (Multiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET ...)
 	NOT-FOR-US: Nuke ET
 CVE-2008-1718 (Buffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, ...)
@@ -262,8 +262,8 @@
 CVE-2007-6712 (Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux ...)
 	- linux-2.6 <unfixed> (medium)
 CVE-2008-XXXX [Incorrect input validation in PyString_FromStringAndSize()]
-	- python2.5 <unfixed>
-	TODO: python2.4 needs to be checked
+	- python2.4 2.4.5-2
+	- python2.5 2.5.2-3
 CVE-2008-XXXX [tss not properly dropping privileges]
 	- tss <removed> (medium; bug #475747; bug #475736)
 	TODO: request CVE ids
@@ -327,9 +327,8 @@
 	NOT-FOR-US: PHP-Nuke Platinum
 CVE-2008-1679 [initial fix for CVE-2007-4965 was incomplete]
 	RESERVED
-	- python2.4 <unfixed>
-	- python2.5 <unfixed>
-	NOTE: maintainer has been notified
+	- python2.4 2.4.5-2
+	- python2.5 2.5.2-3
 CVE-2008-1678
 	RESERVED
 CVE-2008-1677