[Secure-testing-commits] r11438 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2009-03-18 11:44:13 +0000 (Wed, 18 Mar 2009)
New Revision: 11438

Modified:
   data/CVE/list
Log:
virtualbox-ose patched in unstable, not affected by CVE-2009-0876

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-18 07:12:29 UTC (rev 11437)
+++ data/CVE/list	2009-03-18 11:44:13 UTC (rev 11438)
@@ -108,7 +108,7 @@
 CVE-2009-0877 (Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System ...)
 	NOT-FOR-US: Sun Java System Communications Express
 CVE-2009-0876 (Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and ...)
-	- virtualbox-ose <unfixed> (high; bug #520126)
+	- virtualbox-ose <not-affected> (Vulnerable code not present, Debian version patches localconf)
 	[lenny] - virtualbox-ose <not-affected> (lenny version doesn't install binaries with suid 0)
 CVE-2009-0875 (Race condition in the Doors subsystem in the kernel in Sun Solaris 8 ...)
 	NOT-FOR-US: Sun Solaris