Author: thijs Date: 2011-07-24 14:58:58 +0000 (Sun, 24 Jul 2011) New Revision: 16974 Modified: data/CVE/list Log: squirrelmail fixed in sid Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-07-23 14:33:56 UTC (rev 16973) +++ data/CVE/list 2011-07-24 14:58:58 UTC (rev 16974) @@ -2101,7 +2101,7 @@ CVE-2011-2024 (Cisco Network Registrar before 7.2 has a default administrative ...) NOT-FOR-US: Cisco CVE-2011-2023 (Cross-site scripting (XSS) vulnerability in functions/mime.php in ...) - - squirrelmail <unfixed> + - squirrelmail 2:1.4.22-1 CVE-2011-2022 (The agp_generic_remove_memory function in drivers/char/agp/generic.c ...) {DSA-2264-1 DSA-2240-1} - linux-2.6 2.6.38-5 @@ -8178,10 +8178,10 @@ - opensc 0.11.13-1.1 (low; bug #607427) [lenny] - opensc 0.11.4-5+lenny1.1 CVE-2010-4555 (Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail ...) - - squirrelmail <unfixed> (low) + - squirrelmail 2:1.4.22-1 (low) NOTE: difficult to exploit CVE-2010-4554 (functions/page_header.php in SquirrelMail 1.4.21 and earlier does not ...) - - squirrelmail <unfixed> + - squirrelmail 2:1.4.22-1 CVE-2010-4553 (An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 ...) NOT-FOR-US: IBM Lotus Notes Traveler CVE-2010-4552 (Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote ...)