[Secure-testing-commits] r5353 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2007-01-26 20:24:39 +0100 (Fri, 26 Jan 2007)
New Revision: 5353

Modified:
   data/CVE/list
Log:
- CVE-2007-049[34] new bind9 DoSs fixed
- CVE-2007-0010 new gtk issue fixed
- kdegraphics fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-01-26 19:11:06 UTC (rev 5352)
+++ data/CVE/list	2007-01-26 19:24:39 UTC (rev 5353)
@@ -1,3 +1,9 @@
+CVE-2007-0494 [bind DoS]
+	- bind9 1:9.3.4-1
+	TODO: check bind 8
+CVE-2007-0493 [bind DoS]
+	- bind9 1:9.3.4-1
+	TODO: check bind 8
 CVE-2007-XXXX [gstreamer ffmpeg missing checks of packet sizes, chunk sizes, and fragment positions]
 	- gstreamer0.10-ffmpeg 0.10.1-6
 	- gst-ffmpeg 0.8.7-10
@@ -893,7 +899,7 @@
 CVE-2007-0105 (Stack-based buffer overflow in the CSAdmin service in Cisco Secure ...)
 	NOT-FOR-US: Cisco
 CVE-2007-0104 (The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, ...)
-	- kdegraphics <unfixed> (unimportant)
+	- kdegraphics 4:3.5.5-3 (unimportant)
 	- koffice <unfixed> (unimportant)
 	- poppler 0.4.5-5.1 (unimportant)
 	- xpdf <unfixed> (bug #406852; unimportant)
@@ -1663,8 +1669,10 @@
 	- chetcpasswd <removed> (medium)
 CVE-2002-2219 (chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows ...)
 	- chetcpasswd <removed> (low)
-CVE-2007-0010
+CVE-2007-0010 [gtk error-handling-in-pixbuf-loaders]
 	RESERVED
+	- gtk+2.0 2.8.20-5
+	TODO: check gtk 1 ...
 CVE-2007-0009
 	RESERVED
 CVE-2007-0008