[Secure-testing-commits] r10951 - in data: . CVE

[nion at alioth.debian.org]

Author: nion
Date: 2009-01-13 23:50:02 +0000 (Tue, 13 Jan 2009)
New Revision: 10951

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
fill in xrdp bug, NFU, spu notification


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-13 23:02:56 UTC (rev 10950)
+++ data/CVE/list	2009-01-13 23:50:02 UTC (rev 10951)
@@ -37,7 +37,7 @@
 CVE-2008-5883
 	NOT-FOR-US: mini-pub
 CVE-2009-XXXX [xrdp: multiple vulnerabilities]
-	- xrdp <unfixed> (bug filed)
+	- xrdp <unfixed> (bug #511641)
 CVE-2009-XXXX [amaya: stack based buffer overflow]
 	- amaya <unfixed> (medium; bug #507587)
 	NOTE: different vector than described in CVE-2008-5282, see 507587#15
@@ -138,7 +138,7 @@
 CVE-2009-0071 (Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is ...)
 	TODO: check
 CVE-2009-0070 (Integer signedness error in Apple Safari allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2008-5880 (admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass ...)
 	NOT-FOR-US: Gobbl CMS
 CVE-2008-5879 (Cross-site scripting (XSS) vulnerability in index.php in ...)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2009-01-13 23:02:56 UTC (rev 10950)
+++ data/spu-candidates.txt	2009-01-13 23:50:02 UTC (rev 10951)
@@ -325,6 +325,7 @@
 --
 
 multi-gnome-terminal (CVE-2008-5143)
+notified maintainer
 
 --