[Secure-testing-commits] r10143 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-10-22 13:22:38 +0000 (Wed, 22 Oct 2008)
New Revision: 10143

Modified:
   data/CVE/list
Log:
vim fixed versions

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-22 12:06:28 UTC (rev 10142)
+++ data/CVE/list	2008-10-22 13:22:38 UTC (rev 10143)
@@ -1227,6 +1227,7 @@
 CVE-2008-4101 (Vim 3.0 through 7.x before 7.2.010 does not properly escape ...)
 	- vim 2:7.2.010-1 (bug #500381)
 	[etch] - vim 1:7.1.314-3+lenny1
+	[lenny] - vim 1:7.1.314-3+lenny1
 CVE-2008-4098 (MySQL before 5.0.67 allows local users to bypass certain privilege ...)
 	TODO: check
 CVE-2008-4097 (MySQL 5.0.51a allows local users to bypass certain privilege checks by ...)
@@ -2956,7 +2957,7 @@
 CVE-2008-3433 (SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not ...)
 	NOT-FOR-US: SpeedBit Download Accelerator Plus
 CVE-2008-3432 (Heap-based buffer overflow in the mch_expand_wildcards function in ...)
-	TODO: check
+	- vim <not-affected> (Vulnerable code only present in 6.2 and 6.3, none of them in the archive anymore)
 CVE-2008-3430 (Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in ...)
 	NOT-FOR-US: Eyeball MessengerSDK
 CVE-2008-3428 (Session fixation vulnerability in phpFreeChat 1.1 allows remote ...)