Secure testing commits - Nov 2008 - r10251 - data/CVE

Author: jmm-guest
Date: 2008-11-03 09:25:17 +0000 (Mon, 03 Nov 2008)
New Revision: 10251

Modified:
   data/CVE/list
Log:
new qemu issue (currently only fixed in experimental)


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-11-03 03:48:26 UTC (rev 10250)
+++ data/CVE/list	2008-11-03 09:25:17 UTC (rev 10251)
@@ -30,7 +30,6 @@
 	NOT-FOR-US: WebGUI
 CVE-2008-4797 (Directory traversal vulnerability in Arihiro Kurata Kantan WEB
Server ...)
 	NOT-FOR-US: Arihiro Kurata Kantan WEB Server
-begin claimed by white
 CVE-2008-4796 (The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy
1.2.3 ...)
 	- libphp-snoopy 1.2.4-1 (bug #504168; medium)
 	- ampache 3.4.1-2 (bug #504169)
@@ -41,9 +40,9 @@
 	- opendb <unfixed> (bug #504173)
 	- wordpress <unfixed> (bug #504234)
 	- moodle <unfixed> (bug #504235)
+	- gforge-plugin-scmcvs <removed>
 	[etch] - gforge-plugin-scmcvs <unfixed> (bug #504258)
 	- magpierss <not-affected> (Fixed in all supported distributions)
-end claimed by white
 CVE-2008-4795 (The links panel in Opera before 9.62 processes Javascript within
the ...)
 	NOT-FOR-US: Opera
 CVE-2008-4794 (Opera before 9.62 allows remote attackers to execute arbitrary
...)
@@ -606,8 +605,9 @@
 	NOT-FOR-US: Sun Java System Web Proxy Server
 CVE-2008-4540 (Windows Mobile 6 on the HTC Hermes device makes WLAN passwords
...)
 	NOT-FOR-US: Windows Mobile
-CVE-2008-4539
+CVE-2008-4539 [qemu heap overflow in Cirrus emulation]
 	RESERVED
+	- qemu 0.9.1+svn20081101-1
 CVE-2008-4538
 	RESERVED
 CVE-2008-4537 (Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6
and ...)