[Secure-testing-commits] r11373 - in data: . CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-03-10 20:52:51 +0000 (Tue, 10 Mar 2009)
New Revision: 11373

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
- asterisk no-dsa for Lenny as well
- mysql 5.1 available in experimental


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-10 20:34:12 UTC (rev 11372)
+++ data/CVE/list	2009-03-10 20:52:51 UTC (rev 11373)
@@ -68,6 +68,7 @@
 	NOT-FOR-US: phpScheduleIt
 CVE-2009-0819 (sql/item_xmlfunc.cc in MySQL before 5.1.32 allows remote authenticated ...)
 	- mysql-dfsg-5.0 <not-affected> (Vulnerable code introduced in 5.1.5)
+	- mysql-dfsg-5.1 5.1.32-1
 CVE-2009-0818 (Cross-site scripting (XSS) vulnerability in the ...)
 	NOT-FOR-US: Taxonomy Theme module for Drupal
 CVE-2009-0817 (Cross-site scripting (XSS) vulnerability in the Protected Node module ...)
@@ -2950,6 +2951,7 @@
 	NOT-FOR-US: CA Anti-Virus
 CVE-2009-0041 (IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before ...)
 	- asterisk <unfixed> (low; bug #513413)
+	[lenny] - asterisk <no-dsa> (Minor issue)
 	[etch] - asterisk <no-dsa> (Minor issue)
 CVE-2008-5867 (Directory traversal vulnerability in Yerba SACphp 6.3 allows remote ...)
 	NOT-FOR-US: Yerba

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2009-03-10 20:34:12 UTC (rev 11372)
+++ data/spu-candidates.txt	2009-03-10 20:52:51 UTC (rev 11373)
@@ -22,6 +22,11 @@
 
 --
 
+asterisk (CVE-2009-0041)
+#513413
+
+--
+
 audacity (CVE-2007-6061)
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453283
 notified maintainer