Author: thijs
Date: 2010-09-09 19:56:37 +0000 (Thu, 09 Sep 2010)
New Revision: 15298
Modified:
data/CVE/list
Log:
fixes from stable point update 5.0.6
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-09-09 19:42:18 UTC (rev 15297)
+++ data/CVE/list 2010-09-09 19:56:37 UTC (rev 15298)
@@ -822,9 +822,10 @@
CVE-2010-2946 [jfs issue]
RESERVED
- linux-2.6 2.6.32-21
+ [lenny] - linux-2.6 2.6.26-25
CVE-2010-2945 (The default configuration of SLiM before 1.3.2 places ./ (dot
slash) ...)
- slim 1.3.1-7 (low; bug #594414)
- [lenny] - slim <no-dsa> (Maintainer will fix through stable point
update)
+ [lenny] - slim 1.3.0-1+lenny3
CVE-2010-2944 (The authenticate function in LDAPUserFolder/LDAPUserFolder.py in
...)
{DSA-2096-1}
- zope-ldapuserfolder <removed> (high; bug #593466)
@@ -834,6 +835,7 @@
CVE-2010-2942 [linux-2.6 net sched infoleak]
RESERVED
- linux-2.6 <unfixed>
+ [lenny] - linux-2.6 2.6.26-25
CVE-2010-2941
RESERVED
CVE-2010-2940 (The auth_send function in providers/ldap/ldap_auth.c in System
...)
@@ -873,7 +875,7 @@
- rekonq 0.5.0-1
CVE-2010-XXXX [Insufficient stripping of CR/LF allows arbitrary IRC command
execution]
- libpoe-component-irc-perl 6.32+dfsg-1
- [lenny] - libpoe-component-irc-perl <no-dsa> (#581194)
+ [lenny] - libpoe-component-irc-perl 6.32+dfsg-1 (bug #581194)
CVE-2010-2926 (SQL injection vulnerability in index.php in sNews 1.7 allows
remote ...)
NOT-FOR-US: sNews CMS
CVE-2010-2925 (SQL injection vulnerability in index.php in Freeway CMS
1.4.3.210 ...)
@@ -1847,7 +1849,7 @@
NOT-FOR-US: Opera
CVE-2010-2575 (Heap-based buffer overflow in the RLE decompression
functionality in ...)
- okular <removed> (low)
- [lenny] - okular <no-dsa> (Will be fixed in a stable point update)
+ [lenny] - okular 0.7-2+lenny1
- kdegraphics 4:4.4.5-2
[lenny] - kdegraphics <not-affected> (Lenny''s kdegraphics
doesn''t yet contain Okular)
NOTE: http://www.kde.org/info/security/advisory-20100825-1.txt
@@ -1930,7 +1932,7 @@
- cacti 0.8.7g-1
CVE-2010-2542 (Stack-based buffer overflow in the is_git_directory function in
...)
- git-core 1:1.7.1-1.1 (low; bug #590026)
- [lenny] - git-core <no-dsa> (Minor issue)
+ [lenny] - git-core 1:1.5.6.5-3+lenny3.1
CVE-2010-2541 (Buffer overflow in ftmulti.c in the ftmulti demo program in
FreeType ...)
{DSA-2105-1}
- freetype 2.4.2-1 (low)
@@ -1966,7 +1968,7 @@
RESERVED
CVE-2010-2529 (Unspecified vulnerability in ping.c in iputils 20020927,
20070202, ...)
- iputils 3:20100418-2
- [lenny] - iputils <no-dsa> (Minor issue)
+ [lenny] - iputils 3:20071127-1+lenny1
CVE-2010-2528 (The clientautoresp function in family_icbm.c in the oscar
protocol ...)
- pidgin 2.7.2-1
CVE-2010-2527 (Multiple buffer overflows in demo programs in FreeType before
2.4.0 ...)
@@ -2119,7 +2121,7 @@
CVE-2010-2477 [XSS in paste.httpexceptions]
RESERVED
- paste 1.7.4-1 (low)
- [lenny] - paste <no-dsa> (Minor issue)
+ [lenny] - paste 1.7.1-1+lenny1
NOTE: http://bitbucket.org/ianb/paste/changeset/fcae59df8b56
CVE-2010-2475
RESERVED
@@ -2676,7 +2678,7 @@
NOT-FOR-US: joomla!
CVE-2010-2253 (lwp-download in libwww-perl before 5.835 does not reject
downloads to ...)
- libwww-perl 5.835-1 (low)
- [lenny] - libwww-perl <no-dsa> (Minor issue)
+ [lenny] - libwww-perl 5.813-1+lenny2
CVE-2010-2252 (GNU Wget 1.12 and earlier uses a server-provided filename
instead of ...)
{DSA-2088-1}
- wget 1.12-2.1 (low; bug #590296)
@@ -2696,7 +2698,7 @@
CVE-2010-2247 [makepasswd: insecure passwords generated with default settings]
RESERVED
- makepasswd 1.10-5 (low; bug #564559)
- [lenny] - makepasswd <no-dsa> (Minor issue)
+ [lenny] - makepasswd 1.10-3+lenny1
CVE-2010-2246 [feh --wget-timestamp issue]
RESERVED
- feh 1.8-1 (low; bug #587205)
@@ -3123,7 +3125,7 @@
- unrealircd <itp> (bug #515130)
CVE-2010-2074 (istream.c in w3m 0.5.2 and possibly other versions, when ...)
- w3m 0.5.2-5 (low; bug #587445)
- [lenny] - w3m <no-dsa> (Minor issue)
+ [lenny] - w3m 0.5.2-2+lenny1
CVE-2010-2073 (auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames
and ...)
- pyftpd 0.8.5 (low; bug #585776)
[lenny] - pyftpd 0.8.4.6+lenny1
@@ -7899,7 +7901,7 @@
- roundcube 0.3.1-3 (bug #569660)
CVE-2010-0463 (Horde IMP 4.3.6 and earlier does not request that the web
browser ...)
- imp4 4.3.7+debian0-2 (low; bug #569661)
- [lenny] - imp4 <no-dsa> (Minor issue)
+ [lenny] - imp4 4.2-4lenny2
CVE-2010-0462 (Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before
FP6, ...)
NOT-FOR-US: IBM DB2
CVE-2010-0461 (SQL injection vulnerability in the casino (com_casino) component
1.0 ...)