[Secure-testing-commits] r11858 - data/CVE

[Florian Weimer]

Author: fw
Date: 2009-05-09 19:27:01 +0000 (Sat, 09 May 2009)
New Revision: 11858

Modified:
   data/CVE/list
Log:
more cleanups


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-09 19:22:03 UTC (rev 11857)
+++ data/CVE/list	2009-05-09 19:27:01 UTC (rev 11858)
@@ -20355,7 +20355,6 @@
 	[etch] - venkman <not-affected> (Vulnerable code not present)
 CVE-2007-XXXX [unace unspecified security issue related to uninitialized variable]
 	- unace-nonfree 2.5-3
-	[etch] - unace-nonfree <no-dsa> (non-free not supported)
 	[etch] - unace-nonfree 2.5-1etch1
 CVE-2007-6507 (SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, ...)
 	NOT-FOR-US: Trend Micro ServerProtect
@@ -26646,9 +26645,7 @@
 	[etch] - pdftohtml 0.36-13etch1
 	- tetex-bin 3.0-12
 	NOTE: pdftex links to poppler since 3.0-12, thus marking as fixed
-	- cups <not-affected> (we use xpdf-utils in sarge and poppler-utils since etch to not embedd this code)
-	- cupsys <not-affected> (we use xpdf-utils in sarge and poppler-utils since etch to not embedd this code)
-	NOTE: cups uses xpdf-utils and poppler-utils
+	NOTE: cups uses xpdf-utils and poppler-utils since version 1.1.22-7
 	- libextractor 0.5.12-1
 	NOTE: libextractor uses internal pdf decoder since 0.5.12-1, thus marking as fixed
 	- swftools <unfixed> (medium; bug #527449)
@@ -28190,7 +28187,6 @@
 CVE-2007-3698 (The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 ...)
 	- sun-java5 1.5.0-12-1
 	- sun-java6 6-02-1
-	[etch] - sun-java5 <no-dsa> (non-free not supported)
 	[etch] - sun-java5 1.5.0-14-1etch1
 CVE-2007-3697 (PHP remote file inclusion vulnerability in phpbb/sendmsg.php in ...)
 	NOT-FOR-US: FlashBB
@@ -31268,7 +31264,6 @@
 CVE-2007-2435 (Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java ...)
 	- sun-java5 1.5.0-11-1 (medium; bug #423062)
 	[etch] - sun-java5 1.5.0-14-1etch1
-	[etch] - sun-java5 <no-dsa> (Non-free not supported)
 CVE-2007-2434 (Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows ...)
 	NOT-FOR-US: Aventail Connect
 CVE-2007-2433 (Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 ...)
@@ -33899,7 +33894,6 @@
 	- apache <removed> (low)
 	- libapache2-mod-perl2 2.0.2-5 (low; bug #433549)
 	[etch] - libapache2-mod-perl2 <no-dsa> (Minor issue)
-	[etch] - apache <no-dsa> (scheduled for stable point release)
 	[etch] - apache 1.3.34-4.1+etch1
 CVE-2007-1348
 	RESERVED