Author: joeyh Date: 2010-02-03 09:14:20 +0000 (Wed, 03 Feb 2010) New Revision: 14014 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-02-03 06:58:06 UTC (rev 14013) +++ data/CVE/list 2010-02-03 09:14:20 UTC (rev 14014) @@ -4752,6 +4752,7 @@ NOTE: http://mahara.org/interaction/forum/topic.php?id=1169 CVE-2009-3297 [mount race conditions] RESERVED + {DSA-1989-1} - fuse 2.8.1-1.2 (bug #567633) - samba <unfixed> (bug #567554) NOTE: https://bugzilla.samba.org/show_bug.cgi?id=6853 @@ -7121,6 +7122,7 @@ [etch] - zodb <not-affected> (The vulnerability was introduced in ZODB 3.8) [lenny] - zodb <not-affected> (The vulnerability was introduced in ZODB 3.8) CVE-2009-2700 (src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not ...) + {DSA-1988-1} - qt4-x11 4:4.5.3-1 (medium; bug #545793) [etch] - qt4-x11 <not-affected> (QSsl* classes were introduced in Qt 4.3) CVE-2009-2699 (The Solaris pollset feature in the Event Port backend in ...) @@ -9831,7 +9833,7 @@ CVE-2009-1726 (Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and ...) NOT-FOR-US: ColorSync in Apple Mac OS X CVE-2009-1725 (WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, ...) - {DSA-1950-1} + {DSA-1988-1 DSA-1950-1} - webkit 1.1.13-1 (medium; bug #538346) - qt4-x11 4:4.5.2-2 (medium; bug #538347) [etch] - qt4-x11 <not-affected> (QTWebkit was introduced in 4.4) @@ -9872,18 +9874,19 @@ - webkit 1.1.12-1 (low; bug #535793) NOTE: http://trac.webkit.org/changeset/36359 CVE-2009-1713 (The XSLT functionality in WebKit in Apple Safari before 4.0 does not ...) + {DSA-1988-1} - webkit 1.0.1-4 (medium; bug #535793) - qt4-x11 4:4.5.2-2 [etch] - qt4-x11 <not-affected> (QTWebkit was introduced in 4.4) NOTE: http://trac.webkit.org/changeset/34533 CVE-2009-1712 (WebKit in Apple Safari before 4.0 does not prevent remote loading of ...) - {DSA-1950-1} + {DSA-1988-1 DSA-1950-1} - webkit 1.1.12-1 (medium; bug #535793) - qt4-x11 4:4.5.2-2 [etch] - qt4-x11 <not-affected> (QTWebkit was introduced in 4.4) NOTE: http://trac.webkit.org/changeset/41568 CVE-2009-1711 (WebKit in Apple Safari before 4.0 does not properly initialize memory ...) - {DSA-1950-1} + {DSA-1988-1 DSA-1950-1} - webkit 1.1.12-1 (medium; bug #535793) NOTE: http://trac.webkit.org/changeset/36918 - qt4-x11 4:4.5.2-1 @@ -9919,11 +9922,12 @@ CVE-2009-1700 (The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone ...) - webkit 1.1.12-1 (low; bug #535793) CVE-2009-1699 (The XSL stylesheet implementation in WebKit in Apple Safari before ...) + {DSA-1988-1} - webkit 1.0.1-4 (medium; bug #535793) - qt4-x11 4:4.5.2-2 [etch] - qt4-x11 <not-affected> (QTWebkit was introduced in 4.4) CVE-2009-1698 (WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and ...) - {DSA-1950-1 DSA-1868-1 DSA-1867-1} + {DSA-1988-1 DSA-1950-1 DSA-1868-1 DSA-1867-1} - webkit 1.1.5-1 (medium; bug #534946) NOTE: http://trac.webkit.org/changeset/42081 - qt4-x11 4:4.5.2-1 @@ -9955,7 +9959,7 @@ [lenny] - webkit <not-affected> (Vulnerable code not present) NOTE: http://trac.webkit.org/changeset/32791 CVE-2009-1690 (Use-after-free vulnerability in WebKit, as used in Apple Safari before ...) - {DSA-1950-1 DSA-1868-1 DSA-1867-1} + {DSA-1988-1 DSA-1950-1 DSA-1868-1 DSA-1867-1} - webkit 1.1.5-1 (medium; bug #534946) NOTE: http://trac.webkit.org/changeset/42532 - kdelibs 4:3.5.10.dfsg.1-2.1 (medium; bug #534952) @@ -9970,7 +9974,7 @@ - webkit 1.1.12-1 (low; bug #535793) [lenny] - webkit <not-affected> (Vulnerable code not present) CVE-2009-1687 (The JavaScript garbage collector in WebKit in Apple Safari before 4.0, ...) - {DSA-1950-1 DSA-1868-1 DSA-1867-1} + {DSA-1988-1 DSA-1950-1 DSA-1868-1 DSA-1867-1} - webkit 1.1.5-1 (medium; bug #534946) - kdelibs 4:3.5.10.dfsg.1-2.1 (bug #534952) - kde4libs 4:4.3.0-1 @@ -12620,7 +12624,7 @@ {DSA-1784-1} - freetype 2.3.9-4.1 (medium; bug #524925) CVE-2009-0945 (Array index error in the insertItemBefore method in WebKit, as used in ...) - {DSA-1950-1 DSA-1866-1} + {DSA-1988-1 DSA-1950-1 DSA-1866-1} - qt4-x11 4:4.5.2-1 (medium; bug #532718) [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4) - webkit 1.1.5-1 (medium; bug #532724; bug #532725)