Author: jmm-guest Date: 2010-09-29 06:41:11 +0000 (Wed, 29 Sep 2010) New Revision: 15386 Modified: data/CVE/list Log: - CVE assignments - paxtest fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-09-28 21:24:52 UTC (rev 15385) +++ data/CVE/list 2010-09-29 06:41:11 UTC (rev 15386) @@ -363,12 +363,19 @@ RESERVED CVE-2010-3441 RESERVED -CVE-2010-3440 + - abcm2ps 5.9.13-0.1 (low; bug #577014) + [lenny] - abcm2ps <no-dsa> (Minor issue) +CVE-2010-3440 [babiloo insecure downloading and unpacking of dictionary files] RESERVED -CVE-2010-3439 + - babiloo <unfixed> (low; bug #591995) +CVE-2010-3439 [alien-arena: server dos] RESERVED -CVE-2010-3438 + - alien-arena 7.33-5 (low; bug #575621) + [lenny] - alien-arena 7.0-1+lenny2 +CVE-2010-3438 [Insufficient stripping of CR/LF allows arbitrary IRC command execution] RESERVED + - libpoe-component-irc-perl 6.32+dfsg-1 + [lenny] - libpoe-component-irc-perl 6.32+dfsg-1 (bug #581194) CVE-2010-3437 RESERVED CVE-2010-3436 @@ -567,8 +574,7 @@ - qtcreator <unfixed> (bug #598300) CVE-2010-3373 RESERVED - - paxtest <unfixed> (unimportant; bug #598413) - [lenny] - paxtest <no-dsa> (minor issue) + - paxtest 1:0.9.9-1 (unimportant; bug #598413) CVE-2010-3372 RESERVED CVE-2010-3371 @@ -1424,8 +1430,6 @@ - php5 <unfixed> CVE-2010-3057 RESERVED -CVE-2010-XXXX [babiloo insecure downloading and unpacking of dictionary files] - - babiloo <unfixed> (low; bug #591995) CVE-2010-3054 (Unspecified vulnerability in FreeType 2.3.9, and other versions before ...) - freetype 2.4.2-1 (unimportant) CVE-2010-3053 (bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause ...) @@ -1727,9 +1731,6 @@ - webkitkde 0.4svn1059630-1 CVE-2009-4975 (Cross-site scripting (XSS) vulnerability in webview.cpp in ...) - rekonq 0.5.0-1 -CVE-2010-XXXX [Insufficient stripping of CR/LF allows arbitrary IRC command execution] - - libpoe-component-irc-perl 6.32+dfsg-1 - [lenny] - libpoe-component-irc-perl 6.32+dfsg-1 (bug #581194) CVE-2010-2926 (SQL injection vulnerability in index.php in sNews 1.7 allows remote ...) NOT-FOR-US: sNews CMS CVE-2010-2925 (SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 ...) @@ -6266,9 +6267,6 @@ NOT-FOR-US: Joomla! CVE-2010-1303 (Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy ...) NOT-FOR-US: Drupal module -CVE-2010-XXXX [abcm2ps] - - abcm2ps 5.9.13-0.1 (low; bug #577014) - [lenny] - abcm2ps <no-dsa> (Minor issue) CVE-2010-1302 (Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW ...) NOT-FOR-US: Joomla! CVE-2010-1301 (SQL injection vulnerability in main.php in Centreon 2.1.5 allows ...) @@ -7114,9 +7112,6 @@ NOT-FOR-US: JustSystems Corporation Ichitaro CVE-2009-4736 (Cross-site scripting (XSS) vulnerability in search.php in CommonSense ...) NOT-FOR-US: CommonSense CMS -CVE-2010-XXXX [alien-arena: server dos] - - alien-arena 7.33-5 (low; bug #575621) - [lenny] - alien-arena 7.0-1+lenny2 CVE-2010-XXXX [phpCAS XSS in final_uri; PHPCAS-52] - libphp-cas <itp> (bug #495542) - glpi 0.72.4-2 (bug #574760; unimportant)