[Secure-testing-commits] r13580 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2009-12-16 23:00:28 +0000 (Wed, 16 Dec 2009)
New Revision: 13580

Modified:
   data/CVE/list
Log:
automake issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-12-16 21:47:25 UTC (rev 13579)
+++ data/CVE/list	2009-12-16 23:00:28 UTC (rev 13580)
@@ -849,8 +849,13 @@
 	- mysql-dfsg-5.1 5.1.41-1
 	- mysql-dfsg-5.0 <removed>
 	TODO: check
-CVE-2009-4029
+CVE-2009-4029 [Automake security fix for 'make dist*']
 	RESERVED
+	- automake 1:1.11-1
+	TODO: check
+	NOTE: it also affects every Makefile.in generated by automake
+	NOTE: but it doesn't really affect Debian
+	NOTE: http://lists.gnu.org/archive/html/automake/2009-12/msg00012.html
 CVE-2009-4028 (The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x ...)
 	- mysql-dfsg-5.1 5.1.41-1
 	- mysql-dfsg-5.0 <removed>