[Secure-testing-commits] r12160 - data/CVE

Giuseppe Iuculano derevko-guest at alioth.debian.org
Fri Jun 19 07:59:22 UTC 2009


Author: derevko-guest
Date: 2009-06-19 07:59:21 +0000 (Fri, 19 Jun 2009)
New Revision: 12160

Modified:
   data/CVE/list
Log:
- apr-util accepted in stable
- CVE-2009-0949 fixed in unstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-19 07:15:30 UTC (rev 12159)
+++ data/CVE/list	2009-06-19 07:59:21 UTC (rev 12160)
@@ -350,7 +350,7 @@
 	NOTE: exploitability limited, DoS rather obscure attack scenario
 CVE-2009-1956 (Off-by-one error in the apr_brigade_vprintf function in Apache ...)
 	- apr-util 1.3.7+dfsg-1 (low)
-	TODO: next point release: [lenny] - apr-util 1.2.12+dfsg-8+lenny3
+	[lenny] - apr-util 1.2.12+dfsg-8+lenny3
 CVE-2009-1955 (The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in ...)
 	{DSA-1812-1}
 	- apr-util 1.3.7+dfsg-1 (medium)
@@ -3568,7 +3568,7 @@
 	NOT-FOR-US: Apple iTunes
 CVE-2009-0949 (The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 ...)
 	{DSA-1811-1}
-	TODO: check
+	- cups 1.3.10-1
 CVE-2009-0948
 	RESERVED
 CVE-2009-0947




More information about the Secure-testing-commits mailing list