[Secure-testing-commits] r9598 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-08-17 12:13:32 +0000 (Sun, 17 Aug 2008)
New Revision: 9598

Modified:
   data/CVE/list
Log:
fix broken merge

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-08-17 12:06:17 UTC (rev 9597)
+++ data/CVE/list	2008-08-17 12:13:32 UTC (rev 9598)
@@ -44,10 +44,10 @@
 CVE-2008-3653 (Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before ...)
 	- tikiwiki <removed>
 CVE-2008-3652 (src/racoon/handler.c in racoon in ipsec-tools does not remove an ...)
-	- ipsec-tools 1:0.7.1-1 (low)
+	- ipsec-tools <unfixed> (bug #495214)
 	NOTE: attacker needs to be authenticated, see https://bugzilla.redhat.com/show_bug.cgi?id=456660
 CVE-2008-3651 (Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools ...)
-	- ipsec-tools <unfixed> (bug #495214)
+	- ipsec-tools 1:0.7.1-1 (low)
 CVE-2008-3650 (Multiple unspecified vulnerabilities in Horde Groupware Webmail before ...)
 	- horde3 3.2.1+debian0-1 (low; bug #495332)
 	NOTE: this should be a dup of CVE-2008-3330, maybe it'll get a CVE id split
@@ -387,7 +387,7 @@
 	NOTE: gaim is now a transitional package depending on pidgin with its own source package
 	NOTE: http://developer.pidgin.im/ticket/6500
 CVE-2008-3546 (Stack-based buffer overflow in the (1) diff_addremove and (2) ...)
-	{DTSA-153-1}
+	{DTSA-153-1 DTSA-153-2}
 	- git-core 1:1.5.6.5 (medium; bug #494097)
 CVE-2008-3484 (SQL injection vulnerability in eStoreAff 0.1 allows remote attackers ...)
 	NOT-FOR-US: eStoreAff