Author: jmm Date: 2012-07-03 06:09:49 +0000 (Tue, 03 Jul 2012) New Revision: 19640 Modified: data/CVE/list Log: dtach fixed hadoop ITP was closed (uploaded in 2010, but removed after that) Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-07-02 22:32:53 UTC (rev 19639) +++ data/CVE/list 2012-07-03 06:09:49 UTC (rev 19640) @@ -922,7 +922,7 @@ RESERVED CVE-2012-3368 [dtach Memory portion disclosure to the client by unclean client disconnect] RESERVED - - dtach <unfixed> (bug #625302) + - dtach 0.8-2.1 (bug #625302) NOTE: http://sourceforge.net/tracker/?func=detail&aid=3517812&group_id=36489&atid=417357 NOTE: http://sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=812551 @@ -1810,6 +1810,7 @@ RESERVED CVE-2012-2945 RESERVED + NOT-FOR-US: Hadoop CVE-2010-5140 RESERVED CVE-2010-5139 @@ -5241,7 +5242,7 @@ CVE-2012-1575 (Multiple cross-site scripting (XSS) vulnerabilities in Cumin before ...) NOT-FOR-US: cumin CVE-2012-1574 (The Kerberos/MapReduce security functionality in Apache Hadoop ...) - - hadoop <itp> (bug #535861) + NOT-FOR-US: Hadoop CVE-2012-1573 (gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before ...) {DSA-2441-1} - gnutls26 2.12.18-1 (high)