[Secure-testing-commits] r10058 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-10-11 06:29:05 +0000 (Sat, 11 Oct 2008)
New Revision: 10058

Modified:
   data/CVE/list
Log:
NFU: FOSS Gallery

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-11 06:24:54 UTC (rev 10057)
+++ data/CVE/list	2008-10-11 06:29:05 UTC (rev 10058)
@@ -37,7 +37,8 @@
 CVE-2008-4515 (Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side ...)
 	NOT-FOR-US: Blue Coat K9 Web Protection
 CVE-2008-4514 (The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to ...)
-	TODO: check
+	- kdebase <unfixed> (unimportant)
+	NOTE: browser crash is a non-issue
 CVE-2008-4513 (Cross-site scripting (XSS) vulnerability in BBcode API module in ...)
 	NOT-FOR-US: Phorum
 CVE-2008-4512 (ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under ...)
@@ -47,7 +48,7 @@
 CVE-2008-4510 (Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier ...)
 	NOT-FOR-US: Microsoft
 CVE-2008-4509 (Unrestricted file upload vulnerability in processFiles.php in FOSS ...)
-	TODO: check
+	NOT-FOR-US: FOSS Gallery
 CVE-2008-4508 (Stack-based buffer overflow in the file parsing function in Tonec ...)
 	NOT-FOR-US: Tonec Internet Download Manager
 CVE-2008-4507 (Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 ...)