Moritz Muehlenhoff
2006-Sep-07 20:35 UTC
[Secure-testing-commits] r4698 - in data: CVE DSA
Author: jmm-guest
Date: 2006-09-07 20:34:18 +0000 (Thu, 07 Sep 2006)
New Revision: 4698
Modified:
data/CVE/list
data/DSA/list
Log:
triage on mozilla issues
no-dsa for old, obscure php4 issue
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-09-07 20:16:14 UTC (rev 4697)
+++ data/CVE/list 2006-09-07 20:34:18 UTC (rev 4698)
@@ -192,10 +192,10 @@
CVE-2005-4810 (Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote
...)
NOT-FOR-US: Microsoft
CVE-2005-4809 (Mozilla Firefox 1.0.1 and possibly other versions, including
Mozilla ...)
- - mozilla <unfixed> (medium)
+ - mozilla <unfixed> (low)
- firefox <not-affected> (at least 1.5.0.6 is not vulnerable)
- xulrunner <not-affected>
- TODO: check mozilla-firefox from sarge
+ [sarge] - mozilla <no-dsa> (Conceptual problem, not fixable in a
backport)
CVE-2003-1305 (Microsoft Internet Explorer allows remote attackers to cause a
denial ...)
NOT-FOR-US: Microsoft
CVE-2006-XXXX [tikiwiki security issue in jhot.php]
@@ -9985,9 +9985,7 @@
- xulrunner 1.8.0.1-9
CVE-2006-0296 (The XULDocument.persist function in Mozilla, Firefox before
1.5.0.1, ...)
{DSA-1051-1}
- [sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
- firefox 1.5.dfsg+1.5.0.1-1 (bug #351442)
- [sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8
- mozilla 2:1.7.13-0.1
- thunderbird 1.5.0.2-1
CVE-2006-0295 (Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in
mail, ...)
@@ -15126,7 +15124,8 @@
- phpwiki 1.3.12p2-1 (bug #282565; medium)
CVE-2005-XXXX [Possibly incorrect virtualisation in php4]
- php4 <unfixed> (bug #317577; bug #330419; low)
- NOTE: Maintainer can''t reproduce
+ [sarge] - php4 <no-dsa> (Basedir violations not supported)
+ NOTE: Unreproducible
CVE-1999-XXXX [Insecure access control on GNU Mach''s IO ports]
- gnumach 1:20050801-3 (bug #46709)
NOTE: Nearly six years old :-)
Modified: data/DSA/list
==================================================================---
data/DSA/list 2006-09-07 20:16:14 UTC (rev 4697)
+++ data/DSA/list 2006-09-07 20:34:18 UTC (rev 4698)
@@ -399,7 +399,7 @@
{CVE-2006-1629}
[sarge] - openvpn 2.0-1sarge3
[26 Apr 2006] DSA-1044-1 mozilla-firefox - several
- {CVE-2006-1724 CVE-2006-0292 CVE-2005-4134 CVE-2006-1741 CVE-2006-1742
CVE-2006-1737 CVE-2006-1738 CVE-2006-1739 CVE-2006-1740 CVE-2006-1736
CVE-2006-1735 CVE-2006-1734 CVE-2006-1733 CVE-2006-1732 CVE-2006-0749
CVE-2006-1731 CVE-2006-1730 CVE-2006-1729 CVE-2006-1728 CVE-2006-1727
CVE-2006-0748 CVE-2005-4720}
+ {CVE-2006-1724 CVE-2006-0292 CVE-2005-4134 CVE-2006-1741 CVE-2006-1742
CVE-2006-1737 CVE-2006-1738 CVE-2006-1739 CVE-2006-1740 CVE-2006-1736
CVE-2006-1735 CVE-2006-1734 CVE-2006-1733 CVE-2006-1732 CVE-2006-0749
CVE-2006-1731 CVE-2006-1730 CVE-2006-1729 CVE-2006-1728 CVE-2006-1727
CVE-2006-0748 CVE-2005-4720 CVE-2006-0296}
[sarge] - mozilla-firefox 1.0.4-2sarge6
[26 Apr 2006] DSA-1043-1 abcmidi - buffer overflows
{CVE-2006-1514}