[Secure-testing-commits] r13069 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2009-10-22 21:48:23 +0000 (Thu, 22 Oct 2009)
New Revision: 13069

Modified:
   data/CVE/list
Log:
- libwww no-dsa
- systemtap fixed
- fix no-dsa entries for older xerces copies


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-22 21:15:24 UTC (rev 13068)
+++ data/CVE/list	2009-10-22 21:48:23 UTC (rev 13069)
@@ -2428,7 +2428,7 @@
 	NOT-FOR-US: Sun Solaris
 CVE-2009-2911 [systemtap DoS]
 	RESERVED
-	- systemtap <unfixed> (bug filed)
+	- systemtap 1.0-2 (bug #551918)
 	[lenny] - systemtap <not-affected> (Affected functionality only added in 1.0)
 CVE-2009-2910 (arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the ...)
 	- linux-2.6 <unfixed> (medium)
@@ -3533,7 +3533,8 @@
 	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 	- openjdk-6 6b16-1.6-1 (medium; bug #542210)
 	- expat <unfixed> (medium; bug #551936)
-	- w3c-libwww <unfixed> (medium; bug #551938)
+	- w3c-libwww <unfixed> (low; bug #551938)
+	[etch] - w3c-libwww <no-dsa> (Minor issue, only used by fringe apps)
 	- python-xml <unfixed> (medium; bug #551939)
 CVE-2009-2624
 	RESERVED
@@ -5538,7 +5539,9 @@
 	[etch] - xerces-c <no-dsa> (Minor issue)
 	[lenny] - xerces-c <no-dsa> (Minor issue)
 	- xerces-c2 2.8.0+deb1-2 (low; bug #541986)
+	[lenny] - xerces-c2 <no-dsa> (Minor issue)
 	- xerces27 <removed>
+	[etch] - xerces27 <no-dsa> (Minor issue)
 CVE-2009-1884 (Off-by-one error in the bzinflate function in Bzip2.xs in the ...)
 	- libcompress-raw-bzip2-perl 2.018-1 (medium; bug #542777)
 	[lenny] - libcompress-raw-bzip2-perl 2.011-2lenny1