Author: joeyh
Date: 2009-07-13 21:14:36 +0000 (Mon, 13 Jul 2009)
New Revision: 12336
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-07-13 20:24:46 UTC (rev 12335)
+++ data/CVE/list 2009-07-13 21:14:36 UTC (rev 12336)
@@ -307,6 +307,7 @@
CVE-2009-2296 (The NFSv4 server kernel module in Sun Solaris 10, and
OpenSolaris ...)
NOT-FOR-US: kernel module in Sun Solaris
CVE-2009-2295 (Multiple integer overflows in CamlImages 2.2 and earlier might
allow ...)
+ {DSA-1832-1}
- camlimages 1:3.0.1-2 (medium; bug #535909)
CVE-2009-2294 (Integer overflow in the Png_datainfo_callback function in Dillo
2.1 ...)
- dillo 2.2.1 (medium; bug #535788)
@@ -1134,10 +1135,10 @@
[lenny] - w3m <no-dsa> (Minor issue)
[etch] - w3m <no-dsa> (Minor issue)
- chromium-browser <itp> (low; bug #520324)
- - lynx 2.8.7rel.1-1 (low; bug #532520)
+ - lynx 2.8.7rel.1-1 (low; bug #532520)
[lenny] - lynx <no-dsa> (Minor issue)
[etch] - lynx <no-dsa> (Minor issue)
- - dillo <unfixed> (low; bug #532522)
+ - dillo <unfixed> (low; bug #532522)
[lenny] - dillo <no-dsa> (Minor issue)
[etch] - dillo <no-dsa> (Minor issue)
NOTE: These issues can be fixed in more recent upstream versions, but the risk
@@ -4760,6 +4761,7 @@
NOTE: for locally modified configs and even for that I fail to
NOTE: see why anyone would run a kernel w/o CONFIG_SHMEM?
CVE-2009-0858 (The response_addname function in response.c in Daniel J.
Bernstein ...)
+ {DSA-1831-1}
- djbdns 1:1.05-5 (low; bug #518169; bug #517631)
CVE-2009-0857 (Cross-site scripting (XSS) vulnerability in /prm/reports in the
...)
NOT-FOR-US: SunMC