[Secure-testing-team] [Secure-testing-commits] r6529 - data/CVE

[Florian Weimer]

* Nico Golde:

>> +CVE-2007-4743 [Incorrect fix for CVE-2007-3999: buffer overflow in RPC library]
>> +	- krb5 <unfixed> (high)
>> +	- librpcsecgss <unfixed>
>>  CVE-2007-4731
>
> Is there any public information about why exactly this patch 
> is wrong?

<http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86>

I've also put it into the list file.