Author: joeyh
Date: 2009-04-11 21:14:14 +0000 (Sat, 11 Apr 2009)
New Revision: 11609
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-04-11 21:08:37 UTC (rev 11608)
+++ data/CVE/list 2009-04-11 21:14:14 UTC (rev 11609)
@@ -132,8 +132,10 @@
CVE-2009-1252
RESERVED
CVE-2009-1251 (Heap-based buffer overflow in the cache manager in the client in
...)
+ {DSA-1768-1}
- openafs 1.4.10+dfsg1-1
CVE-2009-1250 (The cache manager in the client in OpenAFS 1.0 through 1.4.8 and
1.5.0 ...)
+ {DSA-1768-1}
- openafs 1.4.10+dfsg1-1
CVE-2009-1249 (Cross-site scripting (XSS) vulnerability in Feed element mapper
5.x ...)
NOT-FOR-US: Feed element mapper for Drupal
@@ -777,6 +779,7 @@
[etch] - sun-java5 <no-dsa> (Non-free not supported)
[lenny] - sun-java5 <no-dsa> (Non-free not supported)
CVE-2009-1101 (Unspecified vulnerability in the lightweight HTTP server ...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
- sun-java5 1.5.0-18-1
@@ -789,30 +792,36 @@
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
CVE-2009-1098 (Buffer overflow in Java SE Development Kit (JDK) and Java
Runtime ...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
CVE-2009-1097 (Multiple buffer overflows in Java SE Development Kit (JDK) and
Java ...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
CVE-2009-1096 (Buffer overflow in unpack200 in Java SE Development Kit (JDK)
and Java ...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
- sun-java5 1.5.0-18-1
[etch] - sun-java5 <no-dsa> (Non-free not supported)
[lenny] - sun-java5 <no-dsa> (Non-free not supported)
CVE-2009-1095 (Integer overflow in unpack200 in Java SE Development Kit (JDK)
and ...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
- sun-java5 1.5.0-18-1
[etch] - sun-java5 <no-dsa> (Non-free not supported)
[lenny] - sun-java5 <no-dsa> (Non-free not supported)
CVE-2009-1094 (Unspecified vulnerability in the LDAP implementation in Java SE
...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
- sun-java5 1.5.0-18-1
[etch] - sun-java5 <no-dsa> (Non-free not supported)
[lenny] - sun-java5 <no-dsa> (Non-free not supported)
CVE-2009-1093 (LdapCtx in the LDAP service in Java SE Development Kit (JDK) and
Java ...)
+ {DSA-1769-1}
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
CVE-2009-XXXX [unspecified xfig temp issue]
@@ -1718,6 +1727,7 @@
CVE-2009-0794
RESERVED
CVE-2009-0793 (cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in
OpenJDK ...)
+ {DSA-1769-1}
TODO: check
CVE-2009-0792 [integer overflows in argyll]
RESERVED
@@ -2119,7 +2129,7 @@
CVE-2009-0734 (Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in
Nokia ...)
NOT-FOR-US: MultimediaPlayer.exe
CVE-2009-0733 (Multiple stack-based buffer overflows in the ReadSetOfCurves
function ...)
- {DSA-1745-1}
+ {DSA-1769-1 DSA-1745-1}
- lcms 1.18.dfsg-1 (bug #522446)
CVE-2009-0732 (Downloadcenter 2.1 stores common.h under the web root with ...)
NOT-FOR-US: Downloadcenter
@@ -2140,7 +2150,7 @@
CVE-2009-0724
RESERVED
CVE-2009-0723 (Multiple integer overflows in LittleCMS (aka lcms or liblcms)
before ...)
- {DSA-1745-1}
+ {DSA-1769-1 DSA-1745-1}
- lcms 1.18.dfsg-1 (bug #522446)
CVE-2009-0722 (Directory traversal vulnerability in admin.php in Potato News
1.0.0 ...)
NOT-FOR-US: Potato News
@@ -2777,7 +2787,7 @@
CVE-2009-0582 (The ntlm_challenge function in the NTLM SASL authentication
mechanism ...)
TODO: check
CVE-2009-0581 (Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2,
as ...)
- {DSA-1745-1}
+ {DSA-1769-1 DSA-1745-1}
- lcms 1.18.dfsg-1 (bug #522446)
CVE-2009-0580
RESERVED
@@ -46651,6 +46661,7 @@
CVE-2006-2427 (freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav
1.0.3h ...)
- clamav <not-affected> (clamav-freshclam doesn''t ship
freshclam setuid or setgid)
CVE-2006-2426 (Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK
1.5.0_6 ...)
+ {DSA-1769-1}
- sun-java5 1.5.0-10-1 (bug #384734)
- sun-java6 6-13-1
[lenny] - sun-java6 <no-dsa> (Non-free not supported)