Author: jmw Date: 2011-02-02 21:37:34 +0000 (Wed, 02 Feb 2011) New Revision: 16044 Modified: data/CVE/list Log: bugzilla CVEs fixed but not recorded Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-02-02 21:16:11 UTC (rev 16043) +++ data/CVE/list 2011-02-02 21:37:34 UTC (rev 16044) @@ -4087,7 +4087,7 @@ [lenny] - iceape <not-affected> (Only a stub package) [lenny] - xulrunner <not-affected> (bug in optimization added later) CVE-2010-3764 (The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, ...) - - bugzilla <unfixed> (bug #602420; low) + - bugzilla 3.6.3.0-1 (bug #602420; low) [squeeze] - bugzilla 3.6.2.0-4.2 CVE-2010-3763 (Cross-site scripting (XSS) vulnerability in core/summary_api.php in ...) - mantis 1.1.8+dfsg-9 (bug #601618) @@ -5682,7 +5682,7 @@ {DSA-2123-1} - nss 3.12.8-1 CVE-2010-3172 (CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before ...) - - bugzilla <unfixed> (bug #602420; low) + - bugzilla 3.6.3.0-1 (bug #602420; low) [squeeze] - bugzilla 3.6.2.0-4.2 CVE-2010-3171 (The Math.random function in the JavaScript implementation in Mozilla ...) NOTE: Will likely be rejected by MITRE