[Secure-testing-commits] r3338 - data/CVE

Joey Hess joeyh at costa.debian.org
Sat Jan 21 22:25:55 UTC 2006


Author: joeyh
Date: 2006-01-21 22:25:50 +0000 (Sat, 21 Jan 2006)
New Revision: 3338

Modified:
   data/CVE/list
Log:
more bug maint


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-21 21:28:26 UTC (rev 3337)
+++ data/CVE/list	2006-01-21 22:25:50 UTC (rev 3338)
@@ -189,8 +189,9 @@
 CVE-2006-0229 (Unquoted Windows search path vulnerability in Wehntrust might allow ...)
 	NOT-FOR-US: Wehntrust
 CVE-2006-0228 (The RBAC functionality in grsecurity before 2.1.8 does not properly ...)
-	- kernel-patch-grsecurity2 <unfixed> (bug #349246; medium)
+	- kernel-patch-grsecurity2 2.1.8-1 (bug #349246; medium)
 	- kernel-patch-2.4-grsecurity <unfixed> (bug #349247; medium)
+	- gradm2 2.1.8-1 (medium)
 CVE-2006-0227 (Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, ...)
 	NOT-FOR-US: lpsched in Sun Solaris
 CVE-2006-0226 (Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) ...)
@@ -1662,7 +1663,7 @@
 	- horde3 3.0.9-1 (bug #342942; medium)
 CVE-2005-4189 (Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith ...)
 	- kronolith2 2.0.6-1 (bug #342943; medium)
-	- kronolith <unfixed> (bug filed; medium)
+	- kronolith <unfixed> (bug #349261; medium)
 CVE-2005-4188
 	RESERVED
 CVE-2005-4187
@@ -8845,7 +8846,7 @@
 	NOTE: log the developers seem unwilling to fix this, as it only affects a debug
 	NOTE: function.
 	NOTE: fixed in CVS, estimated release of PHP5.1 to fix this issue
-	- php4 <unfixed> (bug filed; low)
+	- php4 <unfixed> (bug #349260; low)
 	- php5 5.1.1-1 (bug #336654; low)
 CVE-2002-1953 (Heap-based buffer overflow in the goim handler of AOL Instant ...)
 	NOT-FOR-US: AIM




More information about the Secure-testing-commits mailing list