Secure testing commits - Jun 2007 - r5981 - data/CVE

Author: stef-guest
Date: 2007-06-08 18:02:52 +0000 (Fri, 08 Jun 2007)
New Revision: 5981

Modified:
   data/CVE/list
Log:
new webpy issue fixed
NFUs
bugnum


Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-06-08 16:41:28 UTC (rev 5980)
+++ data/CVE/list	2007-06-08 18:02:52 UTC (rev 5981)
@@ -1,5 +1,7 @@
 CVE-2007-XXXX [wordpress SQL injection]
-	- wordpress <unfixed> (bug filed)
+	- wordpress <unfixed> (bug #428073)
+CVE-2007-XXXX [webpy HTTP response splitting vulnerability
+	- webpy 0.210-1 (bug #427715)
 CVE-2007-XXXX [dar choosing weak IV when encrypting]
 	- dar 2.3.3-1 (bug #425335; low)
 	[sarge] - dar <no-dsa> (minor issue)
@@ -1270,11 +1272,11 @@
 CVE-2007-2391
 	RESERVED
 CVE-2007-2390 (Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9
allows ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2007-2389 (Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not
clear ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2007-2388 (Unspecified vulnerability in Apple QuickTime for Java 7.1.6 on
Mac OS ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2007-2387
 	RESERVED
 CVE-2007-2386 (Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to
10.4.9 ...)