[Secure-testing-commits] r10288 - in data: CVE NMU

[nion at alioth.debian.org]

Author: nion
Date: 2008-11-05 20:26:26 +0000 (Wed, 05 Nov 2008)
New Revision: 10288

Modified:
   data/CVE/list
   data/NMU/list
Log:
CVE-2008-2378 fixed in 0.8-8.1
added reference for nagios issue, maintainer is aware of this


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-05 19:00:00 UTC (rev 10287)
+++ data/CVE/list	2008-11-05 20:26:26 UTC (rev 10288)
@@ -1,6 +1,7 @@
 CVE-2008-XXXX [CSRF in nagios]
 	- nagios3 <unfixed> (low)
 	TODO: report bug, check nagios2
+	NOTE: http://secunia.com/Advisories/32543/
 CVE-2008-4917
 	RESERVED
 CVE-2008-4916
@@ -6041,7 +6042,7 @@
 	RESERVED
 CVE-2008-2378 [insecure system call in hf]
 	RESERVED
-	- hf <unfixed> (medium; bug #504182)
+	- hf 0.8-8.1 (medium; bug #504182)
 CVE-2008-2377 (Use after free vulnerability in the ...)
 	- gnutls26 2.4.1-1 (medium)
 CVE-2008-2376 (Integer overflow in the rb_ary_fill function in array.c in Ruby before ...)

Modified: data/NMU/list
===================================================================
--- data/NMU/list	2008-11-05 19:00:00 UTC (rev 10287)
+++ data/NMU/list	2008-11-05 20:26:26 UTC (rev 10288)
@@ -126,3 +126,4 @@
 2008-10-04 mercurial 1.0.1-5.1
 2008-10-07 ipsec-tools 0.7.1-1.2
 2008-11-03 vlc 0.8.6.h-4.1
+2008-11-05 hf 0.8-8.1