[Secure-testing-commits] r9957 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-10-02 14:35:29 +0000 (Thu, 02 Oct 2008)
New Revision: 9957

Modified:
   data/CVE/list
Log:
NFU
new issue emacs22 issue (CVE-2008-3949), x/emacs21 not-affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-02 14:22:31 UTC (rev 9956)
+++ data/CVE/list	2008-10-02 14:35:29 UTC (rev 9957)
@@ -549,7 +549,7 @@
 CVE-2008-4120 (Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 ...)
 	NOT-FOR-US: FlatPress
 CVE-2008-4119 (Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk ...)
-	TODO: check
+	NOT-FOR-US: CA Service Desk
 CVE-2008-4118 (Cross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd ...)
 	NOT-FOR-US: High Norm Sound Master
 CVE-2008-4117 (Unspecified vulnerability in a web page in the PRM module in Sun ...)
@@ -922,7 +922,9 @@
 CVE-2008-3950 (Off-by-one error in the ...)
 	TODO: check
 CVE-2008-3949 (Emacs in SUSE Linux imports Python script from the current working ...)
-	TODO: check
+	- emacs22 <unfixed> (low; bug #499568)
+	- emacs21 <not-affected> (doesn't provide the python functionality)
+	- xemacs21 <not-affected> (doesn't provide the python functionality)
 CVE-2008-3948 (SQL injection vulnerability in admin/users/self-2.php in XRMS allows ...)
 	NOT-FOR-US: XRMS
 CVE-2008-3947 (DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain ...)