[Secure-testing-commits] r9027 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-06-11 12:08:46 +0000 (Wed, 11 Jun 2008)
New Revision: 9027

Modified:
   data/CVE/list
Log:
add further notes on why CVE-2008-2152 does not affect openoffice in debian

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-11 09:57:56 UTC (rev 9026)
+++ data/CVE/list	2008-06-11 12:08:46 UTC (rev 9027)
@@ -850,6 +850,9 @@
 CVE-2008-2152
 	RESERVED
 	- openoffice.org <not-affected> (openoffice in Debian does not use the custom allocations but g/malloc)
+	NOTE: see ooo-build/distro-configs/CommonLinux.conf.in, openoffice builds on Debian using
+	NOTE: --with-alloc=system which causes the build scripts to use the system allocators instead of the
+	NOTE: custom ones
 CVE-2008-2151
 	RESERVED
 CVE-2008-2150