Author: stef-guest Date: 2006-04-17 16:28:07 +0000 (Mon, 17 Apr 2006) New Revision: 3819 Modified: data/CVE/list Log: linux kernel fixes stlport5 fixed python-cherrypy fixed new kphone issue fixed new resmgr issue fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-04-15 21:14:32 UTC (rev 3818) +++ data/CVE/list 2006-04-17 16:28:07 UTC (rev 3819) @@ -1,5 +1,9 @@ CVE-2006-XXXX [two amaya buffer overflows] - amaya <unfixed> (bug #362575) +CVE-2006-XXXX [kphone stores SIP passwords in world readable files] + - kphone 4.2-3 (bug #337830) +CVE-2006-XXXX [resmgr access restriction bypass] + - resmgr 1.0-4 (low) CVE-2006-1789 (Directory traversal vulnerability in pajax_call_dispatcher.php in ...) NOT-FOR-US: pajax CVE-2006-1788 (Adobe Document Server for Reader Extensions 6.0, during log on, ...) @@ -739,9 +743,9 @@ RESERVED - linux-2.6 <unfixed> CVE-2006-1523 (The __group_complete_signal function in the RCU signal handling ...) - - linux-2.6 <unfixed> + - linux-2.6 2.6.16-7 CVE-2006-1522 (The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 ...) - - linux-2.6 <unfixed> + - linux-2.6 2.6.16-7 CVE-2006-1521 RESERVED CVE-2006-1520 @@ -1983,7 +1987,7 @@ CVE-2006-0964 (Client Firewall in NCP Network Communication Secure Client 8.11 Build ...) NOT-FOR-US: NCP Network Communication Secure Client CVE-2006-0963 (Multiple buffer overflows in STLport 5.0.2 might allow local users to ...) - - stlport5 <unfixed> (bug #358471; medium) + - stlport5 5.0.2-1 (bug #358471; medium) CVE-2006-0962 (SQL injection vulnerability in vuBB 0.2 allows remote attackers to ...) NOT-FOR-US: VuBB CVE-2006-0961 (SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows ...) @@ -2239,7 +2243,7 @@ NOT-FOR-US: Apple Safari CVE-2006-0847 (Directory traversal vulnerability in the staticfilter component in ...) - cherrypy2.1 2.1.1-1 (bug #353542) - - python-cherrypy <unfixed> (bug #354479) + - python-cherrypy 2.1.1-1 (bug #354479) CVE-2006-0846 (Multiple cross-site scripting (XSS) vulnerabilities in Leif M. ...) NOT-FOR-US: Leif M. Wright''s Blog CVE-2006-0845 (Leif M. Wright''s Blog 3.5 allows remote authenticated users with ...) @@ -2465,7 +2469,7 @@ - xfree86 <not-affected> CVE-2006-0744 [x86_64: When user could have changed RIP always force IRET] RESERVED - - linux-2.6 <unfixed> + - linux-2.6 2.6.16-7 CVE-2006-0743 (Format string vulnerability in LocalSyslogAppender in Apache log4net ...) NOT-FOR-US: Log4Net CVE-2006-0742 (The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux ...)