[Secure-testing-commits] r8571 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-04-18 14:17:21 +0000 (Fri, 18 Apr 2008)
New Revision: 8571

Modified:
   data/CVE/list
Log:
CVE-2008-1836 does not affect clamav in debian

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-04-18 14:01:19 UTC (rev 8570)
+++ data/CVE/list	2008-04-18 14:17:21 UTC (rev 8571)
@@ -77,7 +77,7 @@
 CVE-2008-1838 (SQL injection vulnerability in BosClassifieds Classified Ads System ...)
 	NOT-FOR-US: BosClassifieds Classified Ads System
 CVE-2008-1836 (The rfc2231 function in message.c in libclamav in ClamAV before 0.93 ...)
-	TODO: check
+	- clamav <not-affected> (Vulnerable code introduced later, checked back with upstream)
 CVE-2008-1834 (swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict ...)
 	TODO: check
 CVE-2008-1833 (Heap-based buffer overflow in libclamav in ClamAV 0.92.1 allows remote ...)