[Secure-testing-commits] r13136 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2009-10-29 00:48:27 +0000 (Thu, 29 Oct 2009)
New Revision: 13136

Modified:
   data/CVE/list
Log:
update re the possible cve dups for oo.o


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-29 00:43:21 UTC (rev 13135)
+++ data/CVE/list	2009-10-29 00:48:27 UTC (rev 13136)
@@ -1443,7 +1443,8 @@
 CVE-2009-3240 (Cross-site scripting (XSS) vulnerability in the Happy Linux XF-Section ...)
 	NOT-FOR-US: module for XOOPS
 CVE-2009-3239 (Buffer overflow in the EMF parser implementation in OpenOffice.org ...)
-	NOTE: dup of CVE-2009-2139 and CVE-2009-2140, reported to mitre
+	- openoffice.org <not-affected>
+	NOTE: SUSE says that it is not a dup of CVE-2009-2139 and CVE-2009-2140...
 CVE-2009-3238 (The get_random_int function in drivers/char/random.c in the Linux ...)
 	- linux-2.6 2.6.30-1 (low)
 	- linux-2.6.24 <removed> (low)