[Secure-testing-commits] r9295 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-07-11 00:17:36 +0000 (Fri, 11 Jul 2008)
New Revision: 9295

Modified:
   data/CVE/list
Log:
NFUs; new webkit issue fixed in sid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-07-11 00:02:05 UTC (rev 9294)
+++ data/CVE/list	2008-07-11 00:17:36 UTC (rev 9295)
@@ -236,13 +236,13 @@
 CVE-2008-3002
 	RESERVED
 CVE-2008-3001 (The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote ...)
-	TODO: check
+	NOT-FOR-US: additional drupal module Aggregation module
 CVE-2008-3000 (The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access ...)
-	TODO: check
+	NOT-FOR-US: additional drupal module Aggregation module
 CVE-2008-2999 (Multiple SQL injection vulnerabilities in the Aggregation module 5.x ...)
-	TODO: check
+	NOT-FOR-US: additional drupal module Aggregation module
 CVE-2008-2998 (Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation ...)
-	TODO: check
+	NOT-FOR-US: additional drupal module Aggregation module
 CVE-2008-2997 (Cross-site scripting (XSS) vulnerability in index.php in Gravity Board ...)
 	NOT-FOR-US: Gravity Board
 CVE-2008-2996 (Multiple SQL injection vulnerabilities in index.php in Gravity Board X ...)
@@ -516,9 +516,9 @@
 CVE-2008-2851 (Multiple buffer overflows in OFF System before 0.19.14 allow remote ...)
 	NOT-FOR-US: OFF System
 CVE-2008-2850 (SQL injection vulnerability in the TrailScout module 5.x before ...)
-	TODO: check
+	NOT-FOR-US: additional drupal module TrailScout
 CVE-2008-2849 (Cross-site scripting (XSS) vulnerability in the TrailScout module 5.x ...)
-	TODO: check
+	NOT-FOR-US: additional drupal module TrailScout
 CVE-2008-2848 (Cross-site scripting (XSS) vulnerability in the search functionality ...)
 	NOT-FOR-US: MindTouch DekiWiki 
 CVE-2008-2847 (SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 ...)
@@ -1751,11 +1751,11 @@
 CVE-2008-2310 (Format string vulnerability in c++filt in Apple Mac OS X 10.5 before ...)
 	- binutils 2.18.1~cvs20080103-1 (low)
 CVE-2008-2309 (Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X ...)
-	TODO: check
+	NOT-FOR-US: CoreTypes in Apple Mac OS X
 CVE-2008-2308 (Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 ...)
-	TODO: check
+	NOT-FOR-US: Alias Manager in Apple Mac OS X
 CVE-2008-2307 (Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as ...)
-	NOT-FOR-US: Windows issue
+	- webkit 1.0.1-1
 CVE-2008-2306 (Apple Safari before 3.1.2 on Windows does not properly interpret the ...)
 	NOT-FOR-US: Windows issue
 CVE-2008-2305