[Secure-testing-commits] r8649 - data/CVE

Tue Apr 29 20:49:43 UTC 2008

Author: nion
Date: 2008-04-29 20:49:42 +0000 (Tue, 29 Apr 2008)
New Revision: 8649

Modified:
   data/CVE/list
Log:
add note to CVE-2008-1382 that this is fixed in 1.2.26-1 even if 1.2.26 upstream version is vulnerable

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2008-04-29 20:32:41 UTC (rev 8648)
+++ data/CVE/list	2008-04-29 20:49:42 UTC (rev 8649)
@@ -1280,6 +1280,7 @@
 	NOT-FOR-US: Gentoo Linux Ebuilds
 CVE-2008-1382 (libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 ...)
 	- libpng 1.2.26-1 (low; bug #476669)
+	NOTE: 1.2.26-1 contains a patch to fix that
 	[etch] - libpng <no-dsa> (Minor issue, rare function)
 CVE-2008-1381
 	RESERVED


