[Secure-testing-commits] r10396 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-11-16 16:01:12 +0000 (Sun, 16 Nov 2008)
New Revision: 10396

Modified:
   data/CVE/list
Log:
update on CVE-2008-5031

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-16 15:54:41 UTC (rev 10395)
+++ data/CVE/list	2008-11-16 16:01:12 UTC (rev 10396)
@@ -76,8 +76,10 @@
 	- linux-2.6 2.6.26-10
 	- linux-2.6.24 <unfixed>
 CVE-2008-5031 (Multiple integer overflows in Python 2.5.2 allow context-dependent ...)
-	TODO: check
-	NOTE: fixed in python2.5, need to determine the exact version
+	- python2.5 2.5.2-11.1
+	TODO: check python2.4
+	NOTE: definitely fixed in 2.5.2-11.1 for lenny/unstable (svn-updates.dpatch)
+	NOTE: maybe fixed earlier, doko is not able to tell the exact version atm
 CVE-2008-5030 (Heap-based buffer overflow in the cddb_read_disc_data function in ...)
 	- libcdaudio 0.99.12p2-7 (bug #505478)
 CVE-2008-5024 (Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, ...)