[Secure-testing-commits] r11021 - data/CVE

[atomo64-guest at alioth.debian.org]

Author: atomo64-guest
Date: 2009-01-22 17:19:01 +0000 (Thu, 22 Jan 2009)
New Revision: 11021

Modified:
   data/CVE/list
Log:
libpng minor issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-22 17:13:18 UTC (rev 11020)
+++ data/CVE/list	2009-01-22 17:19:01 UTC (rev 11021)
@@ -276,7 +276,7 @@
 CVE-2009-0122 (hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and ...)
 	- hplip <not-affected> (only a bug in ubuntus postinst script, we use our own postinst which is not vulnerable)
 CVE-2008-5907 (The png_check_keyword function in pngwutil.c in libpng before 1.0.42, ...)
-	TODO: check
+	- libpng <unfixed> (low; bug #512665)
 CVE-2008-5906 (Eval injection vulnerability in the web interface plugin in KTorrent ...)
 	- ktorrent2.2 2.2.8.dfsg.1-1
 	- ktorrent 3.1.4+dfsg.1-1