Author: jmm-guest
Date: 2005-12-25 10:52:02 +0000 (Sun, 25 Dec 2005)
New Revision: 3156
Modified:
data/CVE/list
Log:
three horde apps fixed
some kernel updates
Modified: data/CVE/list
==================================================================---
data/CVE/list 2005-12-24 18:36:12 UTC (rev 3155)
+++ data/CVE/list 2005-12-25 10:52:02 UTC (rev 3156)
@@ -619,13 +619,13 @@
CVE-2005-4242 (Multiple cross-site scripting (XSS) vulnerabilities in Horde
Turba H3 ...)
- turba2 2.0.5-1 (bug #342946; medium)
CVE-2005-4192 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
- - mnemo2 <unfixed> (bug #342944; medium)
+ - mnemo2 2.0.3-1 (bug #342944; medium)
CVE-2005-4191 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
- - nag2 <unfixed> (bug #342945; medium)
+ - nag2 2.0.4-1 (bug #342945; medium)
CVE-2005-4190 (Multiple cross-site scripting (XSS) vulnerabilities in Horde
...)
- horde3 3.0.9-1 (bug #342942; medium)
CVE-2005-4189 (Multiple cross-site scripting (XSS) vulnerabilities in Horde
Kronolith ...)
- - kronolith <unfixed> (bug #342943; medium)
+ - kronolith 2.0.6-1 (bug #342943; medium)
CVE-2005-4188
RESERVED
CVE-2005-4187
@@ -17984,7 +17984,8 @@
CVE-2004-0229 (The framebuffer driver in Linux kernel 2.6.x does not properly
use the ...)
NOT-FOR-US: Kernel 2.6 framebuffer bug
CVE-2004-0228 (Integer signedness error in the cpufreq proc handler
(cpufreq_procctl) ...)
- NOTE: fixed in linux 2.4.27-pre3
+ - kernel-source-2.4.27 <not-affected> (2.4 does not have cpufreq)
+ TODO: Check 2.6
CVE-2004-0227 (Buffer overflow in the zms script in ZoneMinder before 1.19.2
may ...)
NOT-FOR-US: ZoneMinder
CVE-2004-0226 (Multiple buffer overflows in Midnight Commander (mc) before
4.6.0 may ...)
@@ -18065,7 +18066,7 @@
CVE-2004-0182 (Mailman before 2.0.13 allows remote attackers to cause a denial
of ...)
- mailman <not-affected> (RedHat specific bug)
CVE-2004-0181 (The JFS file system code in Linux 2.4.x has an information leak
in ...)
- NOTE: fixed in 2.4.26-pre5
+ - kernel-source-2.4.27 <not-affected> (Fixed before upload into archive;
2.4.26-pre5)
CVE-2004-0180 (The client for CVS before 1.11 allows a remote malicious CVS
server to ...)
{DSA-486}
- cvs 1:1.12.5-4 (medium)