Author: jmm-guest
Date: 2010-10-23 12:32:58 +0000 (Sat, 23 Oct 2010)
New Revision: 15507
Modified:
data/CVE/list
Log:
- new proftpd issue
- php5 fixed
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-10-23 12:29:23 UTC (rev 15506)
+++ data/CVE/list 2010-10-23 12:32:58 UTC (rev 15507)
@@ -1,4 +1,7 @@
CVE-2010-XXXX
+ - proftpd-dfsg 1.3.3a-4
+ [lenny] - proftpd-dfsg <no-dsa> (Minor issue)
+CVE-2010-XXXX
- fusionforge 5.0.2-3
CVE-2010-XXXX
- flash-kernel 2.33 (low)
@@ -2521,8 +2524,7 @@
NOT-FOR-US: Tivoli
CVE-2010-3065 (The default session serializer in PHP 5.2 through 5.2.13 and 5.3
...)
{DSA-2089-1}
- - php5 <unfixed>
- NOTE: Fixed in experimental: version 5.3.3-1
+ - php5 5.3.3-1
CVE-2010-3057
RESERVED
CVE-2010-3054 (Unspecified vulnerability in FreeType 2.3.9, and other versions
before ...)
@@ -2767,7 +2769,7 @@
[lenny] - squid3 <not-affected> (vulnerable code introduced in 3.1.6)
NOTE: http://marc.info/?l=squid-users&m=128263555724981&w=2
CVE-2010-2950 (Format string vulnerability in stream.c in the phar extension in
PHP ...)
- - php5 <unfixed> (low)
+ - php5 5.3.3-2 (low)
[lenny] - php5 <not-affected> (phar extension introduced in 5.3)
CVE-2010-2947 (Heap-based buffer overflow in the HX_split function in string.c
in ...)
- libhx 3.5-2 (low; bug #594393)
@@ -3913,7 +3915,7 @@
CVE-2010-2532 (** DISPUTED ** ...)
- lxsession 0.4.4-3 (bug #591409)
CVE-2010-2531 (The var_export function in PHP 5.2 before 5.2.14 and 5.3 before
5.3.3 ...)
- - php5 <unfixed> (low)
+ - php5 5.3.3-2 (low)
CVE-2010-2530 (Multiple integer signedness errors in smb_subr.c in the netsmb
module ...)
NOT-FOR-US: NetBSD
CVE-2010-2529 (Unspecified vulnerability in ping.c in iputils 20020927,
20070202, ...)