Author: jmm
Date: 2011-02-09 08:13:29 +0000 (Wed, 09 Feb 2011)
New Revision: 16082
Modified:
data/CVE/list
Log:
- one kernel issue doesn''t affect Lenny or Squeeze
- rewrite openssh entry not that openssh has been fixed in sid
- libuser fixed
- move java/fpu entry to php
Modified: data/CVE/list
==================================================================---
data/CVE/list 2011-02-09 04:52:12 UTC (rev 16081)
+++ data/CVE/list 2011-02-09 08:13:29 UTC (rev 16082)
@@ -1,9 +1,6 @@
CVE-2011-XXXX [wordpress multiple issues]
- wordpress <unfixed>
NOTE: http://codex.wordpress.org/Version_3.0.5
-CVE-2011-XXXX [java x87 floating point bug]
- - openjdk-6 <unfixed>
- - sun-java6 <unfixed>
CVE-2011-XXXX [phpmyadmin path disclosure PMASA-2011-1]
- phpmyadmin <unfixed> (unimportant)
NOTE: Path disclosure; paths in Debian are public info already
@@ -589,7 +586,9 @@
RESERVED
CVE-2011-0539 [Legacy certificates stack disclosure]
RESERVED
- - openssh <not-affected> (Only affects OpenSSH 5.6 and 5.7)
+ - openssh 1:5.8p1-2
+ [squeeze] - openssh <not-affected> (Only affects OpenSSH 5.6 and 5.7)
+ [lenny] - openssh <not-affected> (Only affects OpenSSH 5.6 and 5.7)
CVE-2011-0538
RESERVED
CVE-2011-0537 (Multiple directory traversal vulnerabilities in (1) ...)
@@ -1247,6 +1246,8 @@
NOTE: CVE ID requested
CVE-2010-4645 (strtod.c, as used in the zend_strtod function in PHP 5.2 before
5.2.17 ...)
- php5 5.3.3-7 (high)
+ - openjdk-6 <unfixed>
+ - sun-java6 <unfixed>
[lenny] - php5 <unfixed> (high)
NOTE: lenny9 doesn''t appear to be affected, for a reason still
unknown
CVE-2011-XXXX [Crash with long HOME environment variable]
@@ -2331,7 +2332,7 @@
- mediawiki <unfixed>
[lenny] - mediawiki 1:1.12.0-2lenny7
CVE-2011-0002 (libuser before 0.57 uses a cleartext password value of (1) !! or
(2) x ...)
- - libuser <unfixed> (bug #610034)
+ - libuser 1:0.56.9.dfsg.1-1.1 (bug #610034)
CVE-2011-0001
RESERVED
CVE-2010-4499 (Session fixation vulnerability in Collaborative Information
Manager ...)
@@ -2978,6 +2979,8 @@
CVE-2010-4250 [linux inotify memory leak]
RESERVED
- linux-2.6 <unfixed>
+ [squeeze] - linux-2.6 <not-affected> (Introduced after 2.6.32)
+ [lenny] - linux-2.6 <not-affected> (Introduced after 2.6.32)
CVE-2010-4249 (The wait_for_unix_gc function in net/unix/garbage.c in the Linux
...)
{DSA-2153-1}
- linux-2.6 2.6.32-30