Author: gilbert-guest
Date: 2009-06-29 17:50:29 +0000 (Mon, 29 Jun 2009)
New Revision: 12226
Modified:
data/CVE/list
Log:
lenny''s point release of xpdf is now in squeeze (and one more squeeze
kernel update)
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-06-29 17:42:52 UTC (rev 12225)
+++ data/CVE/list 2009-06-29 17:50:29 UTC (rev 12226)
@@ -3143,6 +3143,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0-1 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-1182 (Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf
3.02pl2 and ...)
@@ -3150,6 +3151,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0-1 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-1181 (The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and
earlier, ...)
@@ -3157,6 +3159,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0-1 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-1180 (The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and
earlier, ...)
@@ -3164,6 +3167,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0-1 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-1179 (Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and
earlier, ...)
@@ -3171,6 +3175,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0-1 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-1178 (Unspecified vulnerability in the server in IBM Tivoli Storage
Manager ...)
@@ -4456,6 +4461,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-0799 (The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and
earlier, ...)
@@ -4463,6 +4469,7 @@
- poppler 0.10.6-1 (medium; bug #524806)
[lenny] - poppler 0.8.7-2
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics 4.0 (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-0798 (ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers
to ...)
@@ -6980,6 +6987,7 @@
CVE-2009-0195 (Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS
1.3.9, ...)
{DSA-1790-1}
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
TODO: check poppler cups kdegraphics swftools
CVE-2009-0194 (The domain-locking implementation in the ...)
NOT-FOR-US: Garmin Communicator Plug-In
@@ -7069,12 +7077,13 @@
- poppler <unfixed> (medium; bug #524806)
- cups <not-affected> (Uses poppler''s pdftops)
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics <unfixed> (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-0165 (Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and
earlier, as ...)
{DSA-1793-1 DSA-1790-1}
- xpdf <unfixed> (low; bug #524809)
- NOTE: probably only affects Mac OS X
+ [squeeze] - xpdf 3.02-1.4+lenny1
CVE-2009-0164 (The web interface for CUPS before 1.3.10 does not validate the
HTTP ...)
- cups 1.3.10-1 (low)
[lenny] - cups <no-dsa> (Minor issue, needs several prerequirements for
attack)
@@ -7122,6 +7131,7 @@
- poppler <unfixed> (medium; bug #524806)
- cups <not-affected> (Uses poppler''s pdftops)
- xpdf <unfixed> (medium; bug #524809)
+ [squeeze] - xpdf 3.02-1.4+lenny1
- kdegraphics <unfixed> (medium; bug #524810)
- swftools <unfixed> (medium; bug #527449)
CVE-2009-0146 (Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2
and ...)
@@ -8112,6 +8122,7 @@
CVE-2009-0028 (The clone system call in the Linux kernel 2.6.28 and earlier
allows ...)
{DSA-1800-1 DSA-1794-1 DSA-1787-1}
- linux-2.6 2.6.29-1
+ [squeeze] - linux-2.6 2.6.26-17
- linux-2.6.24 <removed>
CVE-2009-0027 (The request handler in JBossWS in JBoss Enterprise Application
...)
- jbossas4 <unfixed>