Author: jmm-guest Date: 2010-12-08 11:24:50 +0000 (Wed, 08 Dec 2010) New Revision: 15665 Modified: data/CVE/list Log: update clamav status (lenny isn''t affected, despite being EOLed) Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-12-08 09:14:58 UTC (rev 15664) +++ data/CVE/list 2010-12-08 11:24:50 UTC (rev 15665) @@ -1,10 +1,9 @@ CVE-2010-4510 REJECTED - TODO: check CVE-2010-4479 (Unspecified vulnerability in pdf.c in libclamav in ClamAV before ...) - - clamav <undetermined> - [lenny] - clamav <end-of-life> - TODO: check + - clamav 0.96.5+dfsg-1 + [lenny] - clamav <not-affected> (Introduced in 3643f3d2b0a38fdc7bc6777d093c857b9760804e) + NOTE: Fixed in 019f1955194360600ecf0644959ceca6734c2d7b CVE-2010-4478 (OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly ...) - openssh <unfixed> TODO: check @@ -515,10 +514,12 @@ NOTE: details and patch at https://bugzilla.redhat.com/659676 CVE-2010-4261 (Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ...) - clamav 0.96.5+dfsg-1 - [lenny] - clamav <end-of-life> + [lenny] - clamav <not-affected> (icon extractor not yet present) + NOTE: Fixed in 1f3db7f074995bd4e1d0183b2db8b1c472d2f41b CVE-2010-4260 (Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV ...) - clamav 0.96.5+dfsg-1 - [lenny] - clamav <end-of-life> + [lenny] - clamav <not-affected> (Introduced in 3643f3d2b0a38fdc7bc6777d093c857b9760804e) + NOTE: Fixed in 019f1955194360600ecf0644959ceca6734c2d7b CVE-2010-4259 (Stack-based buffer overflow in FontForge 20100501 allows remote ...) - fontforge 0.0.20100501-4 (bug #605537) CVE-2010-4258 [linux failure to revert address limit override in OOPS error path]