[Secure-testing-commits] r12212 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-06-28 09:46:23 +0000 (Sun, 28 Jun 2009)
New Revision: 12212

Modified:
   data/CVE/list
Log:
CVE-2009-0945: kdelibs and kdegraphics are affected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-26 21:14:15 UTC (rev 12211)
+++ data/CVE/list	2009-06-28 09:46:23 UTC (rev 12212)
@@ -3871,6 +3871,13 @@
 CVE-2009-0945 (Array index error in the insertItemBefore method in WebKit, as used in ...)
 	- qt4-x11 <unfixed> (medium; bug #532718)
 	- webkit <unfixed> (medium; bug #532724; bug #532725)
+	- kdelibs <unfixed> (medium; bug #534917)
+	[lenny] - kdelibs <not-affected> (khtml doesn't have SVG support)
+	NOTE: http://websvn.kde.org/?view=rev&revision=983302
+	- kdegraphics <not-affected> (Vulnerable code not present)
+	[lenny] - kdegraphics <unfixed> (medium; bug #534918)
+	[etch] - kdegraphics <unfixed> (medium; bug #534918)
+	NOTE: http://websvn.kde.org/?view=rev&revision=983306
 CVE-2009-0944 (The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X ...)
 	NOT-FOR-US: Microsoft Office Spotlight
 CVE-2009-0943 (Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not ...)