[Secure-testing-commits] r9161 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-06-25 22:24:39 +0000 (Wed, 25 Jun 2008)
New Revision: 9161

Modified:
   data/CVE/list
Log:
one OO issue not affecting Debian
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-25 22:19:47 UTC (rev 9160)
+++ data/CVE/list	2008-06-25 22:24:39 UTC (rev 9161)
@@ -437,9 +437,9 @@
 CVE-2008-2641
 	RESERVED
 CVE-2008-2640 (Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 ...)
-	TODO: check
+	NOT-FOR-US: Adobe Flex
 CVE-2008-2639 (Stack-based buffer overflow in the ODBC server service in Citect ...)
-	TODO: check
+	NOT-FOR-US: Citect CitectSCADA
 CVE-2008-2638 (Static code injection vulnerability in guestbook.php in 1Book 1.0.1 ...)
 	NOT-FOR-US: 1Book
 CVE-2008-2637 (Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL ...)
@@ -866,9 +866,9 @@
 CVE-2008-2429
 	RESERVED
 CVE-2008-2428 (Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic ...)
-	TODO: check
+	NOT-FOR-US: TorrentTrader
 CVE-2008-2427 (Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView ...)
-	TODO: check
+	NOT-FOR-US: NConvert, GFL SDK, XnView
 CVE-2008-2426 (Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 ...)
 	{DSA-1594-1}
 	- imlib2 1.4.0-1.1 (medium; bug #483816)
@@ -1001,7 +1001,7 @@
 CVE-2008-2367
 	RESERVED
 CVE-2008-2366 (Untrusted search path vulnerability in a certain Red Hat build script ...)
-	TODO: check
+	- openoffice.org <not-affected> (RedHat-specific packaging flaw)
 CVE-2008-2365
 	RESERVED
 CVE-2008-2364 (The ap_proxy_http_process_response function in mod_proxy_http.c in the ...)