[Secure-testing-commits] r10914 - data/CVE

[alfie at alioth.debian.org]

Author: alfie
Date: 2009-01-09 21:07:10 +0000 (Fri, 09 Jan 2009)
New Revision: 10914

Modified:
   data/CVE/list
Log:
corrected devscripts information with the help of adsb

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-09 16:47:37 UTC (rev 10913)
+++ data/CVE/list	2009-01-09 21:07:10 UTC (rev 10914)
@@ -1457,9 +1457,12 @@
 	- lcms 1.16-1
 CVE-2008-5315 (Directory traversal vulnerability in the web interface in Apple iPhone ...)
 	NOT-FOR-US: Apple iPhone Configuration Web Utility
-CVE-2008-XXXX [multiple insecure tempfiles usage issues in devscripts]
+CVE-2008-XXXX [Insecure tmpdir creation]
 	- devscripts 2.10.42 (low; bug #507482)
 	[etch] - devscripts <no-dsa> (Minor issue)
+CVE-2008-XXXX [Insecure tempfile creation]
+	- devscripts 2.10.42 (low; bug #508111)
+	[etch] - devscripts <not-affected> (vulnerable code not present)
 	[lenny] - devscripts 2.10.35lenny1 (low)
 CVE-2008-5314 (Stack consumption vulnerability in libclamav/special.c in ClamAV ...)
 	{DSA-1680-1}