[Secure-testing-commits] r19094 - data/CVE

[Michael Gilbert]

Author: mgilbert
Date: 2012-04-29 06:24:19 +0000 (Sun, 29 Apr 2012)
New Revision: 19094

Modified:
   data/CVE/list
Log:
another pam issue that's already fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-29 06:23:43 UTC (rev 19093)
+++ data/CVE/list	2012-04-29 06:24:19 UTC (rev 19094)
@@ -10146,9 +10146,12 @@
 	NOT-FOR-US: Joomla
 CVE-2011-3628
 	RESERVED
-	- pam <unfixed> (low; bug #670076)
+	- pam 1.1.3-7 (low; bug #670076)
 	[squeeze] - pam <no-dsa> (Minor issue)
 	[lenny] - pam <no-dsa> (Minor issue)
+	NOTE: https://bugs.launchpad.net/ubuntu/%2Bsource/pam/%2Bbug/610125
+	NOTE: https://launchpadlibrarian.net/82729670/610125.patch
+	NOTE: its not clear which version fixed this, but its present in the checked version 1.1.3-7
 CVE-2011-3627 (The bytecode engine in ClamAV before 0.97.3 allows remote attackers to ...)
 	- clamav 0.97.3+dfsg-1 (low)
 	[squeeze] - clamav 0.97.3+dfsg-1~squeeze1