[Secure-testing-commits] r14497 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-04-15 21:29:17 +0000 (Thu, 15 Apr 2010)
New Revision: 14497

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
new typo3 issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-04-15 21:14:47 UTC (rev 14496)
+++ data/CVE/list	2010-04-15 21:29:17 UTC (rev 14497)
@@ -552,8 +552,10 @@
 	RESERVED
 	- irssi 0.8.15-1 (low)
 	[lenny] - irssi <no-dsa> (Minor issue)
-CVE-2010-1153
+CVE-2010-1153 [typo3]
 	RESERVED
+	- typo3-src <unfixed> (bug filed)
+	[lenny] - typo3-src <not-affected> (Only affects 4.3.x)
 CVE-2010-1152 (memcached.c in memcached before 1.4.3 allows remote attackers to cause ...)
 	TODO: check
 CVE-2010-1151
@@ -2779,7 +2781,6 @@
 	[etch] - iceape <not-affected> (dns prefetching implemented in xulrunner 1.9.1)
 	[lenny] - iceape <not-affected> (dns prefetching implemented in xulrunner 1.9.1)
 	NOTE: mozilla's dns prefetching leads to disclosure of the user's network location
-	TODO: this may be unimportant since mozilla has chosen to ignore the issue 
 CVE-2009-4629 (Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other ...)
 	- icedove <unfixed> (low)
 	[etch] - icedove <not-affected> (dns prefetching implemented in xulrunner 1.9.1)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2010-04-15 21:14:47 UTC (rev 14496)
+++ data/spu-candidates.txt	2010-04-15 21:29:17 UTC (rev 14497)
@@ -285,6 +285,11 @@
 
 --
 
+nano (CVE-2010-1160, CVE-2010-1161)
+#577817
+
+--
+
 neon27 (CVE-2009-2474)
 #542926
 notified maintainer