[Secure-testing-commits] r8987 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-06-04 21:01:11 +0000 (Wed, 04 Jun 2008)
New Revision: 8987

Modified:
   data/CVE/list
Log:
asterisk not affected by CVE-2008-2119

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-04 16:58:19 UTC (rev 8986)
+++ data/CVE/list	2008-06-04 21:01:11 UTC (rev 8987)
@@ -829,6 +829,8 @@
 	NOT-FOR-US: Sun Java System Application Server
 CVE-2008-2119
 	RESERVED
+	- asterisk <not-affected> (Vulnerable code not present in 1.4.x)
+	NOTE: http://downloads.digium.com/pub/security/AST-2008-008.html
 CVE-2008-2118 (SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows ...)
 	NOT-FOR-US: Project Alumni
 CVE-2008-2117 (Cross-site scripting (XSS) vulnerability in pages/news.page.inc in ...)