[Secure-testing-commits] r12058 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2009-06-06 19:59:24 +0000 (Sat, 06 Jun 2009)
New Revision: 12058

Modified:
   data/CVE/list
Log:
CVE assignments, strongswan entry should be double-checked, since it's now
  split into two separate issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-06 17:30:28 UTC (rev 12057)
+++ data/CVE/list	2009-06-06 19:59:24 UTC (rev 12058)
@@ -217,9 +217,14 @@
 	NOT-FOR-US: Historic issues in proprietary Java
 CVE-2003-1572 (Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned ...)
 	NOT-FOR-US: Historic issues in proprietary Java
-CVE-2009-XXXX [strongSwan Two Denial of Service Vulnerabilities]
+CVE-2009-1957 [strongSwan Two Denial of Service Vulnerabilities]
 	- strongswan <unfixed> (medium; bug #531612)
 	[etch] - strongswan <not-affected> (Vulnerable code not present, IKEv2 was introduced in 4.3)
+	TODO: Check not-affected status after split of temporary entry
+CVE-2009-1958 [strongSwan Two Denial of Service Vulnerabilities]
+	- strongswan <unfixed> (medium; bug #531612)
+	[etch] - strongswan <not-affected> (Vulnerable code not present, IKEv2 was introduced in 4.3)
+	TODO: Check not-affected status after split of temporary entry
 CVE-2009-1841
 	RESERVED
 CVE-2009-1840
@@ -2720,11 +2725,10 @@
 	{DSA-1769-1}
 	- sun-java6 6-13-1
 	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
-CVE-2009-XXXX [unspecified xfig temp issue]
+CVE-2009-1962 [unspecified xfig temp issue]
 	- xfig 1:3.2.5.a-1
 	[etch] - xfig <no-dsa> (Minor issue)
 	[lenny] - xfig <no-dsa> (Minor issue)
-	NOTE: requested CVE id
 CVE-2009-1092 (Use after free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX ...)
 	NOT-FOR-US: LIVEAUDIO.LiveAudioCtrl.1 ActiveX
 CVE-2009-1091 (Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech ...)