[Secure-testing-commits] r8745 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-05-08 17:33:37 +0000 (Thu, 08 May 2008)
New Revision: 8745

Modified:
   data/CVE/list
Log:
CVE-2008-2109 fixed libid3tag 0.15.1b-8

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-08 16:19:19 UTC (rev 8744)
+++ data/CVE/list	2008-05-08 17:33:37 UTC (rev 8745)
@@ -7,7 +7,8 @@
 CVE-2008-2110 (Unrestricted file upload vulnerability in qtofm.php in QTOFileManager ...)
 	NOT-FOR-US: QTOFileManager
 CVE-2008-2109 (field.c in the libid3tag 0.15.0b library allows context-dependent ...)
-	- libid3tag <unfixed> (low; bug #480187)
+	- libid3tag 0.15.1b-8 (low; bug #480187)
+	NOTE: totally different approach to fix the bug, see Kurts comments in the bug report
 CVE-2008-2108 (The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, ...)
 	- php5 <unfixed> (low)
 	- php4 <unfixed> (low)