[Secure-testing-commits] r8139 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-02-12 13:19:06 +0000 (Tue, 12 Feb 2008)
New Revision: 8139

Modified:
   data/CVE/list
Log:
CVE-2007-6595 fixed in 0.92.1~dfsg-1, CVE-2007-6596 non-issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-11 21:55:53 UTC (rev 8138)
+++ data/CVE/list	2008-02-12 13:19:06 UTC (rev 8139)
@@ -1654,13 +1654,14 @@
 	- openafs 1.4.6.dfsg1-1 (medium)
 	NOTE: http://www.openafs.org/security/OPENAFS-SA-2007-003.txt
 CVE-2007-6595 (ClamAV 0.92 allows local users to overwrite arbitrary files via a ...)
-	- clamav <unfixed> (low; bug #458532)
+	- clamav 0.92.1~dfsg-1 (low; bug #458532)
 	[etch] - clamav <not-affected> (Minor issue, first issue doesn't apply)
 	[sarge] - clamav <no-dsa> (Security Support has stopped)
 CVE-2007-6596 (ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows ...)
-	- clamav <unfixed> (low; bug #458532)
+	- clamav <unfixed> (unimportant; bug #458532)
 	[etch] - clamav <no-dsa> (Minor issue)
 	[sarge] - clamav <no-dsa> (Security Support has stopped)
+	NOTE: this is more a feature request than a bug
 CVE-2007-6594 (IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak ...)
 	NOT-FOR-US: Lotus Notes
 CVE-2007-6593 (Multiple stack-based buffer overflows in l123sr.dll in Autonomy ...)