[Secure-testing-commits] r9222 - data/CVE

[seanius at alioth.debian.org]

Author: seanius
Date: 2008-07-03 12:13:33 +0000 (Thu, 03 Jul 2008)
New Revision: 9222

Modified:
   data/CVE/list
Log:
more info on CVE-2008-2829

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-07-03 10:14:52 UTC (rev 9221)
+++ data/CVE/list	2008-07-03 12:13:33 UTC (rev 9222)
@@ -55,9 +55,12 @@
 CVE-2008-2830 (ARDAgent in Apple Mac OS X 10.4 and 10.5 allows local users to gain ...)
 	NOT-FOR-US: Apple Mac OS
 CVE-2008-2829 (php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete ...)
-	- php4 <unfixed>
-	- php5 <unfixed>
-	NOTE: fix sent to t-s and unstable does not seem possible in etch due to
+	[etch] - php4 <unfixed>
+	[etch] - php5 <unfixed>
+  [lenny] - php5 5.2.5-3+lenny2 (low)
+	- php5 5.2.6-2 (low)
+	{DTSA-144-1}
+	NOTE: the fix sent to t-s and unstable does not seem possible in etch due to
 	NOTE: missing api features from the version of libc-client in etch.
 CVE-2008-2826 [sctp overflow]
 	RESERVED