Author: jmm-guest
Date: 2010-08-23 13:54:38 +0000 (Mon, 23 Aug 2010)
New Revision: 15189
Modified:
data/CVE/list
Log:
- lxr and lxr-cvs has been removed
- new OO.org issue
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-08-23 13:06:59 UTC (rev 15188)
+++ data/CVE/list 2010-08-23 13:54:38 UTC (rev 15189)
@@ -275,10 +275,12 @@
CVE-2010-2937 [vlc input validation issue]
RESERVED
- vlc 1.1.3-1
-CVE-2010-2936
+CVE-2010-2936 [buffer overflow in impress]
RESERVED
-CVE-2010-2935
+ - openoffice.org 1:3.2.1-6
+CVE-2010-2935 [buffer overflow in impress]
RESERVED
+ - openoffice.org 1:3.2.1-6
CVE-2010-2934 (Multiple unspecified vulnerabilities in ZNC 0.092 allow remote
...)
TODO: check
CVE-2010-2933 (SQL injection vulnerability in AV Scripts AV Arcade 3 allows
remote ...)
@@ -3375,8 +3377,8 @@
NOT-FOR-US: com_newsfeeds component for joomla!
CVE-2010-1738 (Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in
LXR ...)
{DSA-2092-1}
- - lxr <unfixed> (low; bug #585411)
- - lxr-cvs 0.9.5+cvs20071020-1+lenny1 (low; bug #585412)
+ - lxr <removed> (low; bug #585411)
+ - lxr-cvs <removed> (low; bug #585412)
NOTE: likely to be rejected as a dupe of CVE-2010-1448
CVE-2010-1737 (PHP remote file inclusion vulnerability in ...)
NOT-FOR-US: Gallo
@@ -3666,7 +3668,7 @@
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=553648
CVE-2010-1625 (Cross-site scripting (XSS) vulnerability in LXR Cross Referencer
...)
{DSA-2092-1}
- - lxr <unfixed> (low; bug #588138)
+ - lxr <removed> (low; bug #588138)
- lxr-cvs 0.9.5+cvs20071020-1.1 (low; bug #588137)
CVE-2010-1624 (The msn_emoticon_msg function in slp.c in the MSN protocol
plugin in ...)
- pidgin 2.7.0-1 (low)
@@ -4237,9 +4239,8 @@
[lenny] - python2.4 <no-dsa> (Minor issue)
CVE-2010-1448 (Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in
LXR ...)
{DSA-2092-1}
- - lxr <unfixed> (low; bug #585411)
+ - lxr <removed> (low; bug #585411)
- lxr-cvs 0.9.5+cvs20071020-1.1 (low; bug #588036)
- TODO: prod maintainer (and find out why we have lxr and lxr-cvs)
NOTE: seems to be a dupe of CVE-2010-1738
CVE-2010-1447 (The Safe (aka Safe.pm) module 2.26, and certain earlier
versions, for ...)
{DSA-2051-1}