[Secure-testing-commits] r9183 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-06-28 10:02:15 +0000 (Sat, 28 Jun 2008)
New Revision: 9183

Modified:
   data/CVE/list
Log:
Add iceweasel infos

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-28 09:44:23 UTC (rev 9182)
+++ data/CVE/list	2008-06-28 10:02:15 UTC (rev 9183)
@@ -1,6 +1,6 @@
 CVE-2008-XXXX [possible symlink attack in checkinstall]
 	- checkinstall 1.6.1-7 (low)
-	TODO: CVE id requested
+	NOTE: CVE id requested
 CVE-2008-XXXX [unspecified python-werkzeug issue]
 	- python-werkzeug 0.3.1-1 (unknown)
 CVE-2008-XXXX [sudo does not flush stdin on timeout]
@@ -126,9 +126,9 @@
 CVE-2008-2828 (Stack-based buffer overflow in tmsnc allows remote attackers to cause ...)
 	- tmsnc 0.3.2-1.1 (low; bug #487222)
 CVE-2008-2786 (Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack ...)
-	TODO: check
+	- iceweasel <unfixed> (bug #488358)
 CVE-2008-2785 (Unspecified vulnerability in Firefox 3.0 and 2.0.x has unknown impact ...)
-	TODO: check
+	- iceweasel <unfixed> (bug #488358)
 CVE-2008-2784 (The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT ...)
 	NOT-FOR-US: spamdyke
 CVE-2008-2783 (Multiple cross-site scripting (XSS) vulnerabilities in Horde ...)