[Secure-testing-commits] r3957 - data/CVE

Joey Hess joeyh at costa.debian.org
Mon May 15 21:14:28 UTC 2006


Author: joeyh
Date: 2006-05-15 21:14:23 +0000 (Mon, 15 May 2006)
New Revision: 3957

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-05-15 18:35:07 UTC (rev 3956)
+++ data/CVE/list	2006-05-15 21:14:23 UTC (rev 3957)
@@ -226,6 +226,7 @@
 CVE-2006-2248 (Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source ...)
 	NOT-FOR-US: Xeneo Web Server
 CVE-2006-2247 (WebCalendar 1.0.1 to 1.0.3 generates different error messages ...)
+	{DSA-1056-1}
 	- webcalendar <unfixed> (medium; bug #366927)
 CVE-2006-2246 (Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition ...)
 	NOT-FOR-US: UBlog
@@ -1439,7 +1440,7 @@
 	- thunderbird 1.5.0.2-1 (medium)
 	[sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8 (medium)
 CVE-2006-1732 (Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x ...)
-	{DSA-1051-1 DSA-1044-1}
+	{DSA-1051-1 DSA-1046-1 DSA-1044-1}
 	- firefox <unfixed> (medium)
 	- mozilla-firefox <unfixed> (medium)
 	- mozilla <unfixed> (medium)
@@ -9665,6 +9666,7 @@
 	- xscreensaver 4.23-2 (bug #334193; low)
 	[sarge] - xscreensaver <no-dsa> (Unproblematic for users running stable)
 CVE-2005-3185 (Stack-based buffer overflow in the ntlm_output function in http-ntlm.c ...)
+	{DSA-919-2}
 	- wget 1.10.2-1 (medium)
 	[sarge] - wget <not-affected> (Does not contain NTML authentication code)
 	[woody] - wget <not-affected> (Does not contain NTML authentication code)




More information about the Secure-testing-commits mailing list