[Secure-testing-commits] r11536 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2009-04-02 11:45:13 +0000 (Thu, 02 Apr 2009)
New Revision: 11536

Modified:
   data/CVE/list
Log:
CVE-2009-1214 non-issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-04-02 11:38:44 UTC (rev 11535)
+++ data/CVE/list	2009-04-02 11:45:13 UTC (rev 11536)
@@ -1,7 +1,8 @@
 CVE-2009-1215 (Race condition in GNU screen 4.0.3 allows local users to create or ...)
 	- screen <unfixed> (bug #521123)
 CVE-2009-1214 (GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with ...)
-	- screen <unfixed> (bug #521123)
+	- screen <unfixed> (unimportant; bug #521123)
+	NOTE: documented behaviour "or the public accessible screen-exchange", see man screen
 CVE-2009-1213 (Cross-site request forgery (CSRF) vulnerability in attachment.cgi in ...)
 	- bugzilla <unfixed> (low)
 	[etch] - bugzilla <no-dsa> (Minor issue)