[Secure-testing-commits] r9815 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-09-14 09:55:19 +0000 (Sun, 14 Sep 2008)
New Revision: 9815

Modified:
   data/CVE/list
Log:
New mono issue reported to BTS

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-09-14 09:31:10 UTC (rev 9814)
+++ data/CVE/list	2008-09-14 09:55:19 UTC (rev 9815)
@@ -203,7 +203,7 @@
 	[etch] - linux-2.6 <not-affected> (Vulnerable code not present)
 	[etch] - linux-2.6.24 <not-affected> (Vulnerable code not present)
 CVE-2008-3906 (CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows ...)
-	TODO: check
+	- mono <unfixed> (low; bug #498894)
 CVE-2008-3905 (resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 ...)
 	TODO: check
 CVE-2008-3903 (Asterisk PBX 1.2 through 1.6 and Trixbox PBX 2.6.1, when running with ...)