[Secure-testing-commits] r11342 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2009-03-06 13:52:32 +0000 (Fri, 06 Mar 2009)
New Revision: 11342

Modified:
   data/CVE/list
Log:
NFU; two libpng issues fixed in sid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-06 13:43:55 UTC (rev 11341)
+++ data/CVE/list	2009-03-06 13:52:32 UTC (rev 11342)
@@ -737,7 +737,7 @@
 CVE-2008-6219 (nsrexecd.exe in multiple EMC Networker products including EMC ...)
 	NOT-FOR-US: EMC Networker products
 CVE-2008-6218 (Memory leak in the png_handle_tEXt function in pngrutil.c in libpng ...)
-	TODO: check
+	- libpng 1.2.33-1
 CVE-2008-6217 (Cross-site scripting (XSS) vulnerability in index.php in Extrakt ...)
 	NOT-FOR-US: Extrakt Framework
 CVE-2008-6216 (SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur ...)
@@ -932,7 +932,7 @@
 CVE-2009-0620 (Cisco ACE Application Control Engine Module for Catalyst 6500 Switches ...)
 	NOT-FOR-US: Cisco
 CVE-2009-0619 (Unspecified vulnerability in the Session Border Controller (SBC) ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2009-0618 (Unspecified vulnerability in the Java agent in Cisco Application ...)
 	NOT-FOR-US: Cisco
 CVE-2009-0617 (Cisco Application Networking Manager (ANM) before 2.0 uses a default ...)
@@ -3470,7 +3470,7 @@
 	NOTE: http://www.tdiary.org/20071215.html
 CVE-2009-0040 (The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before ...)
 	- pngcrush 1.6.15-1
-	TODO: check
+	- libpng 1.2.35-1 (bug #516256)
 CVE-2009-0039
 	RESERVED
 CVE-2009-0038