[Secure-testing-commits] r8991 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-06-05 09:35:12 +0000 (Thu, 05 Jun 2008)
New Revision: 8991

Modified:
   data/CVE/list
Log:
Add two buffer overflow issues about evolution

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-05 05:38:07 UTC (rev 8990)
+++ data/CVE/list	2008-06-05 09:35:12 UTC (rev 8991)
@@ -3218,10 +3218,15 @@
 	- xine-lib 1.1.10-1
 	[etch] - xine-lib <not-affected> (Not affected per assessment of maintainer)
 	[sarge] - xine-lib <not-affected> (Not affected per assessment of maintainer)
-CVE-2008-1109
+CVE-2008-1109 [Buffer overflow due to boundary error]
 	RESERVED
-CVE-2008-1108
+	- evolution <unfixed> (low; bug #484639)
+	NOTE: Requires that the user accepts the iCalendar request and replies
+	NOTE: to it from the "Calendars" window.
+CVE-2008-1108 [Buffer overflow due to boundary error]
 	RESERVED
+	- evolution <unfixed> (low; bug #484639)
+	NOTE: Requires that the ITip Formatter plugin is disabled.
 CVE-2008-1107
 	RESERVED
 CVE-2008-1106