[Secure-testing-commits] r8433 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-03-28 00:26:55 +0000 (Fri, 28 Mar 2008)
New Revision: 8433

Modified:
   data/CVE/list
Log:
one php issue a non-issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-03-28 00:16:33 UTC (rev 8432)
+++ data/CVE/list	2008-03-28 00:26:55 UTC (rev 8433)
@@ -317,8 +317,9 @@
 	RESERVED
 CVE-2008-1384
 	RESERVED
-	- php5 <unfixed>
+	- php5 <unfixed> (unimportant)
 	NOTE: http://securityreason.com/achievement_securityalert/52
+	NOTE: Only exploitable through malicious script
 CVE-2008-1383 (The docert function in ssl-cert.eclass, when used by src_compile or ...)
 	NOT-FOR-US: Gentoo Linux Ebuilds
 CVE-2008-1382