[Secure-testing-commits] r14669 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-05-11 03:32:02 +0000 (Tue, 11 May 2010)
New Revision: 14669

Modified:
   data/CVE/list
Log:
perl not-affected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-05-11 03:19:19 UTC (rev 14668)
+++ data/CVE/list	2010-05-11 03:32:02 UTC (rev 14669)
@@ -1747,8 +1747,7 @@
 	[lenny] - nano <no-dsa> (minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2010/04/14/4
 CVE-2010-1158 (Integer overflow in the regular expression engine in Perl 5.8.x allows ...)
-	- perl <undetermined>
-	TODO: check
+	- perl <not-affected> (re engine rewritten for 5.10 to address issues such as this; and proof-of-concept not effective)
 CVE-2010-1157 (Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might ...)
 	- tomcat6 <undetermined>
 	TODO: check