Author: jmm-guest Date: 2010-10-31 12:07:40 +0000 (Sun, 31 Oct 2010) New Revision: 15540 Modified: data/CVE/list Log: icedove, kernel, eglibc, squid3 fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-10-29 21:15:49 UTC (rev 15539) +++ data/CVE/list 2010-10-31 12:07:40 UTC (rev 15540) @@ -81,10 +81,10 @@ [lenny] - linux-2.6 <not-affected> (Vulnerable code not present) CVE-2010-4081 RESERVED - - linux-2.6 <unfixed> (low) + - linux-2.6 2.6.32-27 (low) CVE-2010-4080 RESERVED - - linux-2.6 <unfixed> (low) + - linux-2.6 2.6.32-27 (low) CVE-2010-4079 RESERVED - linux-2.6 <unfixed> (low) @@ -589,6 +589,7 @@ RESERVED CVE-2010-3858 RESERVED + - linux-2.6 2.6.32-27 CVE-2010-3857 RESERVED CVE-2010-3856 @@ -616,7 +617,7 @@ CVE-2010-3847 RESERVED {DSA-2122-1} - - eglibc <unfixed> (bug #600667) + - eglibc 2.11.2-7 (bug #600667) - glibc <removed> [squeeze] - eglibc 2.11.2-6+squeeze1 NOTE: http://sourceware.org/ml/libc-hacker/2010-10/msg00007.html @@ -827,6 +828,7 @@ - iceweasel 3.5.15-1 [lenny] - iceweasel <not-affected> (Lenny''s iceweasel uses Xulrunner from the xulrunner source pkg) - iceape 2.0.10-1 + - icedove 3.0.10-1 [lenny] - iceape <not-affected> (Only a stub package) [lenny] - xulrunner <not-affected> (bug in optimization added later) CVE-2010-3764 @@ -2972,7 +2974,7 @@ CVE-2010-2952 (Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, ...) NOT-FOR-US: Apache Traffic Server CVE-2010-2951 (dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not ...) - - squid3 <unfixed> (bug #599709) + - squid3 3.1.6-1.2 (bug #599709) [lenny] - squid3 <not-affected> (vulnerable code introduced in 3.1.6) NOTE: http://marc.info/?l=squid-users&m=128263555724981&w=2 CVE-2010-2950 (Format string vulnerability in stream.c in the phar extension in PHP ...)