[Secure-testing-commits] r8875 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-05-23 08:10:27 +0000 (Fri, 23 May 2008)
New Revision: 8875

Modified:
   data/CVE/list
Log:
old mozilla issue; add note about xen issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-23 08:06:58 UTC (rev 8874)
+++ data/CVE/list	2008-05-23 08:10:27 UTC (rev 8875)
@@ -973,8 +973,10 @@
 	RESERVED
 CVE-2008-1944 (Buffer overflow in the backend framebuffer of XenSource Xen ...)
 	TODO: check
+	NOTE: sent email to XEN team
 CVE-2008-1943 (Buffer overflow in the backend of XenSource Xen Para Virtualized Frame ...)
 	TODO: check
+	NOTE: sent email to XEN team
 CVE-2008-1942 (Foxit Reader 2.2 allows remote attackers to cause a denial of service ...)
 	NOT-FOR-US: Foxit Reader
 CVE-2008-1941 (Cross-site scripting (XSS) vulnerability in the profile update feature ...)
@@ -1890,7 +1892,7 @@
 	{DSA-1540-1}
 	- lighttpd 1.4.19-2 (low; bug #475438)
 CVE-2005-4874 (The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE ...)
-	TODO: check
+	- iceweasel <not-affected> (old version and CVE)
 CVE-2003-1555 (ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive ...)
 	NOT-FOR-US: ScozNet ScozBook
 CVE-2003-1554 (Cross-site scripting (XSS) vulnerability in scozbook/add.php in ...)