[Secure-testing-commits] r9214 - data/CVE

[seanius at alioth.debian.org]

Author: seanius
Date: 2008-07-02 20:15:59 +0000 (Wed, 02 Jul 2008)
New Revision: 9214

Modified:
   data/CVE/list
Log:
initial notes on CVE-2008-2829

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-07-02 09:32:46 UTC (rev 9213)
+++ data/CVE/list	2008-07-02 20:15:59 UTC (rev 9214)
@@ -54,7 +54,10 @@
 CVE-2008-2830 (ARDAgent in Apple Mac OS X 10.4 and 10.5 allows local users to gain ...)
 	NOT-FOR-US: Apple Mac OS
 CVE-2008-2829 (php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete ...)
-	TODO: check
+	- php4 <unfixed>
+	- php5 <unfixed>
+  NOTE: fix sent to t-s and unstable does not seem possible in etch due to
+  NOTE: missing api features from the version of libc-client in etch.
 CVE-2008-2826 [sctp overflow]
 	RESERVED
 	- linux-2.6 <unfixed>