Author: sf
Date: 2009-07-24 17:56:08 +0000 (Fri, 24 Jul 2009)
New Revision: 12402
Modified:
data/CVE/list
data/DSA/list
Log:
remove apache2-mpm-itk from the apache issues to avoid it showing up in
unstable/testing. It has a dependency on an exact version of apache2.2-common,
allowing to just use the apache2 source package for the tracking. In
unstable/testing, apache2-mpm-itk is ''fixed'' by binNMU, which
is not integrated
into the tracker.
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-07-24 17:21:36 UTC (rev 12401)
+++ data/CVE/list 2009-07-24 17:56:08 UTC (rev 12402)
@@ -1752,7 +1752,6 @@
{DSA-1834-1}
- apache2 2.2.11-7 (medium; bug #536718)
[etch] - apache2 <not-affected> (bug introduced in 2.2.5)
- [lenny] - apache2-mpm-itk 2.2.6-02-1+lenny2
[lenny] - apache2 2.2.9-10+lenny4
CVE-2009-1889 (The OSCAR protocol implementation in Pidgin before 2.5.8
misinterprets ...)
- pidgin 2.5.8-1 (low; bug #535790)
@@ -4085,8 +4084,6 @@
CVE-2009-1195 (The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not
...)
{DSA-1816-1}
- apache2 2.2.11-6 (low; bug #530834)
- - apache2-mpm-itk
- NOTE: apache2-mpm-itk is vulnerable due to static linking
CVE-2009-1194 (Integer overflow in the pango_glyph_string_set_size function in
...)
{DSA-1798-1}
- pango1.0 1.24.0-2 (medium; bug #527474)
Modified: data/DSA/list
==================================================================---
data/DSA/list 2009-07-24 17:21:36 UTC (rev 12401)
+++ data/DSA/list 2009-07-24 17:56:08 UTC (rev 12402)
@@ -22,8 +22,6 @@
[15 Jul 2009] DSA-1834-1 apache2 apache2-mpm-itk - denial of service
{CVE-2009-1891 CVE-2009-1890}
[etch] - apache2 2.2.3-4+etch9
- [etch] - apache2-mpm-itk 2.2.3-01-2+etch3
- [lenny] - apache2-mpm-itk 2.2.6-02-1+lenny2
[lenny] - apache2 2.2.9-10+lenny4
[14 Jul 2009] DSA-1833-1 dhcp3 - arbitrary code execution
{CVE-2009-0692}
@@ -86,9 +84,7 @@
[lenny] - ctorrent 1.3.4-dnh3.2-1+lenny1
[16 Jun 2009] DSA-1816-1 apache2 apache2-mpm-itk - privilege escalation
{CVE-2009-1195}
- [etch] - apache2-mpm-itk 2.2.3-01-2+etch2
[etch] - apache2 2.2.3-4+etch8
- [lenny] - apache2-mpm-itk 2.2.6-02-1+lenny1
[lenny] - apache2 2.2.9-10+lenny3
[14 Jun 2009] DSA-1815-1 libtorrent-rasterbar - denial of
{CVE-2009-1760}