joeyh at alioth.debian.org
2008-Nov-28 21:14 UTC
[Secure-testing-commits] r10506 - data/CVE
Author: joeyh Date: 2008-11-28 21:14:13 +0000 (Fri, 28 Nov 2008) New Revision: 10506 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-11-28 21:13:07 UTC (rev 10505) +++ data/CVE/list 2008-11-28 21:14:13 UTC (rev 10506) @@ -138,7 +138,7 @@ - rails 2.1.0-6 (low) CVE-2008-5188 (The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and ...) - ecryptfs-utils 66-1 (low) - [lenny] - ecryptfs-utils <no-dsa> (Minor issue) + [lenny] - ecryptfs-utils <no-dsa> (Minor issue) CVE-2008-5184 (The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the ...) - cups 1.3.8-1 TODO: check if version in etch is affected @@ -257,7 +257,7 @@ - jailer 0.4-15 CVE-2008-5138 (passwdehd in libpam-mount 0.43 allows local users to overwrite ...) - libpam-mount 1.2+gitaa4791f-1 (low) - [lenny] - libpam-mount 0.44-1+lenny2 + [lenny] - libpam-mount 0.44-1+lenny2 CVE-2008-5137 (tkman in tkman 2.2 allows local users to overwrite arbitrary files via ...) - tkman <unfixed> (bug #506496) CVE-2008-5136 (tkusr in tkusr 0.82 allows local users to overwrite arbitrary files ...) @@ -1993,7 +1993,7 @@ CVE-2008-4965 (liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite ...) {DTSA-177-1 DTSA-178-1} - liquidsoap 0.3.8.1+2-2 (low; bug #496360) - [lenny] - liquidsoap 0.3.6-4+lenny1 + [lenny] - liquidsoap 0.3.6-4+lenny1 CVE-2008-4966 (linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary ...) - openswan <unfixed> (unimportant; bug #496376) NOTE: Only unused packaging bits @@ -52488,7 +52488,7 @@ - mldonkey 2.5.28.1-1 (bug #300560; low) CVE-2005-XXXX [Should include "UNRESTRICTED access to your computer" warning somewhere] - classpath 2:0.92-1 (bug #267040; bug #301134; high) - [etch] - classpath <not-affected> (Doesn''t build the gcjwebplugin binary package) + [etch] - classpath <not-affected> (Doesn''t build the gcjwebplugin binary package) CVE-2005-XXXX [Inconsistent escaping of user supplied data in dbauthpgsql.c] - dbmail 2.2.1-1 (bug #290833; medium) CVE-2005-2548 (vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote ...)