[Secure-testing-commits] r11795 - data/CVE

Nico Golde nion at alioth.debian.org
Tue May 5 15:03:56 UTC 2009


Author: nion
Date: 2009-05-05 15:03:55 +0000 (Tue, 05 May 2009)
New Revision: 11795

Modified:
   data/CVE/list
Log:
new issue in xvfb (xorg-server), no-dsa

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-05 14:42:28 UTC (rev 11794)
+++ data/CVE/list	2009-05-05 15:03:55 UTC (rev 11795)
@@ -1,3 +1,8 @@
+CVE-2009-XXXX [xvfb insecure passing of magic cookie]
+	- xorg-server <unfixed> (low; bug #526678)
+	[etch] - xorg-server <no-dsa> (minor issue)
+	[lenny] - xorg-server <no-dsa> (minor issue)
+	NOTE: CVE id requested
 CVE-2009-XXXX [libmodplug buffer overflow in PAT sampler]
 	- libmodplug <unfixed> (medium; bug #526084)
 	- gst-plugins-bad0.10 <unfixed> (medium; bug #527077)




More information about the Secure-testing-commits mailing list