[Secure-testing-commits] r12098 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-06-10 22:11:21 +0000 (Wed, 10 Jun 2009)
New Revision: 12098

Modified:
   data/CVE/list
Log:
reminder to check ecryptfs issue if support gets added to debian-installer


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-10 21:34:57 UTC (rev 12097)
+++ data/CVE/list	2009-06-10 22:11:21 UTC (rev 12098)
@@ -1916,6 +1916,7 @@
 	NOTE: this is a non-issue as the debian installer doesn't support per user
 	NOTE: encrypted home directories with ecryptfs, so no passphrase is stored in the
 	NOTE: installer logs on disk
+	TODO: check issue again when/if ecryptfs support is added to the debian-installer
 CVE-2009-1295 (Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu ...)
 	- apport <itp> (bug #383347)
 CVE-2009-1294 (Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home ...)