[Secure-testing-commits] r8056 - in data: . CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-01-29 21:00:58 +0000 (Tue, 29 Jan 2008)
New Revision: 8056

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
xfce no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-29 20:57:31 UTC (rev 8055)
+++ data/CVE/list	2008-01-29 21:00:58 UTC (rev 8056)
@@ -1205,8 +1205,12 @@
 	NOT-FOR-US: Zoom Player
 CVE-2007-6532 (Double-free vulnerability in the Widget Library (libxfcegui4) in Xfce ...)
 	- xfce4 4.4.2 (low)
+	[sarge] - xfce4 <no-dsa> (Minor issue)
+	[etch] - xfce4 <no-dsa> (Minor issue)
 CVE-2007-6531 (Stack-based buffer overflow in the Panel (xfce4-panel) component in ...)
 	- xfce4 4.4.2 (low)
+	[sarge] - xfce4 <no-dsa> (Minor issue)
+	[etch] - xfce4 <no-dsa> (Minor issue)
 CVE-2007-6530 (Buffer overflow in the XUpload.ocx ActiveX control in Persits Software ...)
 	NOT-FOR-US: XUpload
 CVE-2007-6529 (Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have ...)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2008-01-29 20:57:31 UTC (rev 8055)
+++ data/spu-candidates.txt	2008-01-29 21:00:58 UTC (rev 8056)
@@ -123,6 +123,10 @@
 
 --
 
+xfce4 (CVE-2007-6351 CVE-2007-6352)
+
+--
+
 zsh (CVE-2007-6209)
 bug #454073)
 notified maintainer