Author: nion Date: 2010-03-26 12:01:33 +0000 (Fri, 26 Mar 2010) New Revision: 14326 Modified: data/CVE/list Log: CVE-2010-0302 fixed in cups 1.4.2-10 xar removed (CVE-2010-0055) Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-03-26 09:14:45 UTC (rev 14325) +++ data/CVE/list 2010-03-26 12:01:33 UTC (rev 14326) @@ -2368,7 +2368,7 @@ {DSA-1982-1} - hybserv 1.9.2-4.1 (low; bug #550389) CVE-2010-0302 (Use-after-free vulnerability in the abstract file-descriptor handling ...) - - cups <unfixed> (bug #572940) + - cups 1.4.2-10 (bug #572940) [lenny] - cups <no-dsa> (Minor issue) - cupsys <not-affected> (vulnerable code introduced in 1.3.x) NOTE: This is for an incomplete fix for CVE-2009-3553 @@ -3603,7 +3603,7 @@ RESERVED CVE-2010-0055 [xar Signature verification bypass] RESERVED - - xar <unfixed> (bug #572556) + - xar <removed> (bug #572556) [lenny] - xar <no-dsa> (Minor issue) CVE-2010-0054 (Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 ...) - webkit <undetermined> (bug #574064)