Author: white
Date: 2008-11-03 10:40:55 +0000 (Mon, 03 Nov 2008)
New Revision: 10254

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
python issues are low priority; two don't affect etch, one no-dsa

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2008-11-03 10:36:57 UTC (rev 10253)
+++ data/CVE/list       2008-11-03 10:40:55 UTC (rev 10254)
@@ -2,11 +2,14 @@
        - ktorrent2.2 2.2.8.dfsg.1-1 (bug #504178)
        - ktorrent <unfixed>
 CVE-2008-XXXX [epiphany-browser: Python scripts load modules from current 
directory]
-       - epiphany-browser <unfixed> (bug #504363)
+       - epiphany-browser <unfixed> (bug #504363; low)
+       [etch] - epiphany-browser <no-dsa> (Minor issue, only vulnerable when 
called from certain dir)
 CVE-2008-XXXX [csound: Python scripts load modules from current directory]
-       - csound <unfixed> (bug #504359)
+       - csound <unfixed> (bug #504359; low)
+       [etch] - csound <not-affected> (Vulnerable code not present)
 CVE-2008-XXXX [eog: Python scripts load modules from current directory]
-       - eog <unfixed> (bug #504352)
+       - eog <unfixed> (bug #504352; low)
+       [etch] - eog <not-affected> (Vulnerable code not present)
 CVE-2008-XXXX [smarty _expand_quoted_text security bypass]
        - smarty <unfixed> (bug #504328)
        - moodle <unfixed> (bug #504345)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt     2008-11-03 10:36:57 UTC (rev 10253)
+++ data/spu-candidates.txt     2008-11-03 10:40:55 UTC (rev 10254)
@@ -133,6 +133,11 @@
 
 --
 
+epiphany-browser
+#504363
+
+--
+
 exiv2 (CVE-2008-2696)
 bug #486328
 
http://dev.robotbattle.com/cgi-bin/viewvc.cgi/exiv2/trunk/src/nikonmn.cpp?r1=1473&r2=1499


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits

Reply via email to