[Secure-testing-commits] r38027 - data/CVE

[Paul Wise]

Author: pabs
Date: 2015-12-02 02:42:24 +0000 (Wed, 02 Dec 2015)
New Revision: 38027

Modified:
   data/CVE/list
Log:
Clarify KeePass NFU text

Reported-by: Sander Bos

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-02 02:30:39 UTC (rev 38026)
+++ data/CVE/list	2015-12-02 02:42:24 UTC (rev 38027)
@@ -73823,7 +73823,7 @@
 CVE-2010-5201 (Untrusted search path vulnerability in MAGIX Samplitude Producer 11 ...)
 	NOT-FOR-US: MAGIX Samplitude Producer
 CVE-2010-5200 (Untrusted search path vulnerability in KeePass Password Safe before ...)
-	NOT-FOR-US: KeePass is a different codebase to KeePassX
+	NOT-FOR-US: KeePass 1 (a Windows only program) is not in Debian, only KeePass 2 (multi-OS version of KeePass) and KeePassX (port/rewrite of KeePass)
 CVE-2010-5199 (Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 ...)
 	NOT-FOR-US: PhotoImpact
 CVE-2010-5198 (Multiple untrusted search path vulnerabilities in Intuit QuickBooks ...)