[Secure-testing-commits] r8047 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-01-28 20:26:09 +0000 (Mon, 28 Jan 2008)
New Revision: 8047

Modified:
   data/CVE/list
Log:
CVE-2007-5093 is actually a Linux kernel issue
flac123 no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-28 10:33:27 UTC (rev 8046)
+++ data/CVE/list	2008-01-28 20:26:09 UTC (rev 8047)
@@ -5640,7 +5640,7 @@
 	NOT-FOR-US: Ipswitch IMail Server
 CVE-2007-5093 (The disconnect method in the Philips USB Webcam (pwc) driver in Linux ...)
 	{DSA-1381-2}
-	NOT-FOR-US: Philips firmware
+	- linux-2.6 2.6.23-1
 CVE-2007-5092 (Directory traversal vulnerability in index.php in the Dance Music ...)
 	NOT-FOR-US: phpNuke module
 CVE-2007-5091 (Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare ...)
@@ -9422,6 +9422,7 @@
 	NOTE: Not security-relevant
 CVE-2007-3507 (Stack-based buffer overflow in the local__vcentry_parse_value function ...)
 	- flac123 0.0.11-1 (low; bug #432008)
+	[etch] - flac123 <no-dsa> (Minor issue)
 CVE-2007-3506 (The ft_bitmap_assure_buffer function in src/base/ftbimap.c in FreeType ...)
 	- freetype 2.3.4 (bug #432013)
 	[sarge] - freetype <not-affected> (Vulnerable code introduced in 2.3.x)