[Secure-testing-commits] r7894 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-01-13 14:12:10 +0000 (Sun, 13 Jan 2008)
New Revision: 7894

Modified:
   data/CVE/list
Log:
new issue: CVE-2007-6284 (libxml2)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-13 14:01:38 UTC (rev 7893)
+++ data/CVE/list	2008-01-13 14:12:10 UTC (rev 7894)
@@ -1356,8 +1356,9 @@
 	TODO: check when autofs5 hits unstable
 	- autofs <not-affected> (-hosts feature not present, auto.net has nosuid,nodev)
 	- autofs5 <unfixed>
-CVE-2007-6284
+CVE-2007-6284 [infinite loop in libxml2 through crafted UTF-8 sequence]
 	RESERVED
+	- libxml2 <unfixed> (medium; bug #460292)
 CVE-2007-6283 (Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key ...)
 	- bind9 <not-affected> (On Debian this file is rw for user bind and just readable for group bind)
 CVE-2007-6282