[Secure-testing-commits] r12156 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2009-06-18 20:59:06 +0000 (Thu, 18 Jun 2009)
New Revision: 12156

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
- lrmi code copy
- new backuppc issue
- bugnum


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-18 20:45:26 UTC (rev 12155)
+++ data/CVE/list	2009-06-18 20:59:06 UTC (rev 12156)
@@ -1,3 +1,6 @@
+CVE-2009-XXXX [backuppc: web frontend installed insecurely by default]
+	- backuppc 3.1.0-6
+	[lenny] - backuppc 3.1.0-4lenny1
 CVE-2009-XXXX [clamav scanner bypass with archives]
 	- clamav 0.95.2+dfsg-1
 	TODO: request CVE id
@@ -1149,7 +1152,7 @@
 CVE-2008-6803 (SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi ...)
 	NOT-FOR-US: Yigit Aybuga Dizi Portali
 CVE-2009-XXXX [More file buffer overflows]
-	- file 5.03-1
+	- file 5.03-1 (bug #525820)
 	[etch] - file <not-affected> (CDF code not yet present in 4.x)
 	[lenny] - file <not-affected> (CDF code not yet present in 4.x)
 CVE-2009-1594 (Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x ...)

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2009-06-18 20:45:26 UTC (rev 12155)
+++ data/embedded-code-copies	2009-06-18 20:59:06 UTC (rev 12156)
@@ -55,6 +55,9 @@
 libevent
 	- transmission <unfixed> (embed; bug #529372)
 
+lrmi
+	- read-edid 2.0.0-1 (embed; bug #495131)
+
 peercast
 	- gnome-peercast <unfixed> (embed)
 	NOTE: gnome-peercast may better be removed, see #466539