[Secure-testing-commits] r8613 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-04-25 16:50:29 +0000 (Fri, 25 Apr 2008)
New Revision: 8613

Modified:
   data/CVE/list
Log:
CVE-2008-165[4,5],CVE-2007-6019 fixed in flashplugin-nonfree 1:1.4 (shipping 9,0,124,0 currently)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-04-25 16:44:28 UTC (rev 8612)
+++ data/CVE/list	2008-04-25 16:50:29 UTC (rev 8613)
@@ -575,9 +575,9 @@
 CVE-2008-1656 (Adobe ColdFusion 8 and 8.0.1 does not properly implement the public ...)
 	NOT-FOR-US: Adobe ColdFusion
 CVE-2008-1655 (Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, ...)
-	TODO: check
+	- flashplugin-nonfree 1:1.4
 CVE-2008-1654 (Interaction error between Adobe Flash and multiple Universal Plug and ...)
-	- flashplugin-nonfree <unfixed>
+	- flashplugin-nonfree 1:1.4
 CVE-2008-1653 (Directory traversal vulnerability in index.php in Sava's Link Manager ...)
 	NOT-FOR-US: Sava's Link Manager
 CVE-2008-1652 (Directory traversal vulnerability in the _serve_request_multiple ...)
@@ -5997,7 +5997,7 @@
 CVE-2007-6020 (Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat ...)
 	NOT-FOR-US: KeyView
 CVE-2007-6019 (Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, ...)
-	TODO: check
+	- flashplugin-nonfree 1:1.4
 CVE-2007-6018 (IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde ...)
 	{DSA-1470-1}
 	- horde3 3.1.6-1 (bug #461131; low)