[Secure-testing-commits] r9106 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-06-19 12:21:33 +0000 (Thu, 19 Jun 2008)
New Revision: 9106

Modified:
   data/CVE/list
Log:
lowering urgency of acidlab now, jfs' code review applies

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-19 12:17:01 UTC (rev 9105)
+++ data/CVE/list	2008-06-19 12:21:33 UTC (rev 9106)
@@ -36046,9 +36046,9 @@
 CVE-2006-1591 (Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe ...)
 	NOT-FOR-US: Microsoft Windows Help
 CVE-2006-1590 (Cross-site scripting (XSS) vulnerability in the PrintFreshPage ...)
-	- acidbase 1.2.5-1 (bug #363548; low)
+	- acidbase 1.2.5-1 (bug #363548; unimportant)
 	[sarge] - acidbase <no-dsa> (Hardly exploitable)
-	- acidlab <removed> (bug #363549; low)
+	- acidlab <removed> (bug #363549; unimportant)
 	[sarge] - acidlab <no-dsa> (Hardly exploitable)
 	NOTE: Not exploitable with the default configuration anyway.
 CVE-2006-1589 (The elf_load_file function in NetBSD 2.0 through 3.0 allows local ...)