[Secure-testing-commits] r13376 - data/CVE

[Nico Golde]

Author: nion
Date: 2009-11-25 19:14:43 +0000 (Wed, 25 Nov 2009)
New Revision: 13376

Modified:
   data/CVE/list
Log:
dstat issue public, bug reported

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-11-25 18:21:35 UTC (rev 13375)
+++ data/CVE/list	2009-11-25 19:14:43 UTC (rev 13376)
@@ -413,7 +413,7 @@
 	[etch] - libexif <not-affected> (Only 0.6.18 is affected)
 CVE-2009-3894 [dstat insecure library path]
 	RESERVED
-	- dstat <unfixed> (low)
+	- dstat <unfixed> (low; bug #557989)
 	[lenny] - dstat <no-dsa> (Minor issue)
 	[etch] - dstat <no-dsa> (Minor issue)
 	NOTE: http://svn.rpmforge.net/svn/trunk/tools/dstat/ChangeLog
@@ -8965,6 +8965,8 @@
 	NOT-FOR-US: Tivoli
 CVE-2009-1177 (Multiple stack-based buffer overflows in maptemplate.c in mapserv in ...)
 	- mapserver 5.2.2-1 (medium; bug #523027)
+	[lenny] - mapserver <not-affected> (Vulnerable code not present or covered by 02_CVE-2009-840-CVE-2009-2281.dpatch)
+	[etch] - mapserver <not-affected> (Vulnerable code not present or covered by 02_CVE-2009-840-CVE-2009-2281.dpatch)
 CVE-2009-1176 (mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before ...)
 	{DSA-1914-1}
 	- mapserver 5.2.2-1 (low; bug #523027)