[Secure-testing-commits] r7928 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-01-15 12:35:25 +0000 (Tue, 15 Jan 2008)
New Revision: 7928

Modified:
   data/CVE/list
Log:
new issue: CVE-2008-022[6,7] mysql-dfsg-5.0

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-15 12:18:04 UTC (rev 7927)
+++ data/CVE/list	2008-01-15 12:35:25 UTC (rev 7928)
@@ -26,9 +26,11 @@
 CVE-2008-0228 (Cross-site request forgery (CSRF) vulnerability in apply.cgi in the ...)
 	NOT-FOR-US: Linksys WRT54GL firmware
 CVE-2008-0227 (yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, ...)
-	TODO: check
+	- mysql-dfsg-4.1 <removed>
+	- mysql-dfsg-5.0 <unfixed> (low; bug #460873)
 CVE-2008-0226 (Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL ...)
-	TODO: check
+	- mysql-dfsg-4.1 <removed>
+	- mysql-dfsg-5.0 <unfixed> (medium; bug #460873)
 CVE-2008-0225 (Heap-based buffer overflow in the rmff_dump_cont function in ...)
 	{DTSA-109-1}
 	- xine-lib <unfixed> (medium; bug #460551)