Author: pedrib-guest Date: 2010-01-24 15:18:18 +0000 (Sun, 24 Jan 2010) New Revision: 13894 Modified: data/CVE/list Log: cleaned up latent CVE-2006-0410 and CVE-2006-0806 for package cacti; resolved CVE-2010-0318 Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-01-24 14:44:39 UTC (rev 13893) +++ data/CVE/list 2010-01-24 15:18:18 UTC (rev 13894) @@ -188,8 +188,8 @@ CVE-2010-0319 (Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 ...) NOT-FOR-US: Docmint CVE-2010-0318 (The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, ...) - - kfreebsd-6 <undetermined> - TODO: check + - kfreebsd-7 7.2-10 (bug #566684) + - kfreebsd-8 8.0-2 CVE-2010-0317 (Novell Netware 6.5 SP8 allows remote attackers to cause a denial of ...) NOT-FOR-US: Novell Netware CVE-2010-0316 (Integer overflow in Google SketchUp before 7.1 M2 allows remote ...) @@ -62141,6 +62141,7 @@ {DSA-1031-1 DSA-1030-1 DSA-1029-1} - libphp-adodb 4.72-0.1 (bug #358872; medium) - moodle 1.6.1+20060825-1 (bug #360396; medium) + - cacti 0.8.6c-7sarge3 (medium) NOTE: according to maintainer, "Moodle neither uses nor plans to use NOTE: ADODB_Pager, so it''s not affected by #360396, but include patch for NOTE: it anyway, just in case somebody decides to use it out of the blue @@ -63191,6 +63192,7 @@ {DSA-1031-1 DSA-1030-1 DSA-1029-1} - libphp-adodb 4.72-0.1 (bug #349985; medium) - moodle 1.6-1 (bug #360395; medium) + - cacti 0.8.6c-7sarge3 (medium) CVE-2006-0409 (Cross-site scripting (XSS) vulnerability in index.php in Pixelpost ...) NOT-FOR-US: Pixelpost Photoblog CVE-2006-0408 (rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users ...)