Author: thijs Date: 2011-07-26 19:13:36 +0000 (Tue, 26 Jul 2011) New Revision: 16997 Modified: data/CVE/list data/DSA/list Log: DSA-2286-1 and further specification of affectedness Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-07-26 18:54:14 UTC (rev 16996) +++ data/CVE/list 2011-07-26 19:13:36 UTC (rev 16997) @@ -1,5 +1,10 @@ -CVE-2011-XXXX [PMASA-2011-11..12 phpMyAdmin various] +CVE-2011-XXXX [PMASA-2011-12 phpMyAdmin Possible superglobal and local variables manipulation in swekey authentication.] + - phpmyadmin 4:3.4.3.2-1 (low) + [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) +CVE-2011-XXXX [PMASA-2011-11 phpMyAdmin Local file inclusion vulnerability and code execution.] - phpmyadmin 4:3.4.3.2-1 + [squeeze] - phpmyadmin <not-affected> (Vulnerable code not present) + [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2883 (The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access ...) NOT-FOR-US: Citrix Access Gateway CVE-2011-2882 (Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control ...) @@ -522,6 +527,8 @@ CVE-2011-2643 [PMASA-2011-10 Local file inclusion.] RESERVED - phpmyadmin 4:3.4.3.2-1 + [squeeze] - phpmyadmin <not-affected> (Vulnerable code not present) + [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2642 [PMASA-2011-9 XSS in table Print view.] RESERVED - phpmyadmin 4:3.4.3.2-1 @@ -867,6 +874,7 @@ RESERVED CVE-2011-2508 (Directory traversal vulnerability in libraries/display_tbl.lib.php in ...) - phpmyadmin 4:3.4.3.1-1 + [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2507 (libraries/server_synchronize.lib.php in the Synchronize implementation ...) - phpmyadmin 4:3.4.3.1-1 (unimportant) [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) Modified: data/DSA/list ==================================================================--- data/DSA/list 2011-07-26 18:54:14 UTC (rev 16996) +++ data/DSA/list 2011-07-26 19:13:36 UTC (rev 16997) @@ -1,3 +1,7 @@ +[26 Jul 2011] DSA-2286-1 phpymadmin - several + {CVE-2011-2505 CVE-2011-2506 CVE-2011-2507 CVE-2011-2508 CVE-2011-2642} + [squeeze] - phpmyadmin 4:3.3.7-6 + [lenny] - phpmyadmin 4:2.11.8.1-5+lenny9 [26 Jul 2011] DSA-2285-1 mapserver - several {CVE-2011-2703 CVE-2011-2704} [squeeze] - mapserver 5.6.5-2+squeeze2