[Secure-testing-commits] r15665 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-12-08 11:24:50 +0000 (Wed, 08 Dec 2010)
New Revision: 15665

Modified:
   data/CVE/list
Log:
update clamav status (lenny isn't affected, despite being EOLed)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-12-08 09:14:58 UTC (rev 15664)
+++ data/CVE/list	2010-12-08 11:24:50 UTC (rev 15665)
@@ -1,10 +1,9 @@
 CVE-2010-4510
 	REJECTED
-	TODO: check
 CVE-2010-4479 (Unspecified vulnerability in pdf.c in libclamav in ClamAV before ...)
-	- clamav <undetermined>
-	[lenny] - clamav <end-of-life>
-	TODO: check
+	- clamav 0.96.5+dfsg-1
+	[lenny] - clamav <not-affected> (Introduced in 3643f3d2b0a38fdc7bc6777d093c857b9760804e)
+	NOTE: Fixed in 019f1955194360600ecf0644959ceca6734c2d7b
 CVE-2010-4478 (OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly ...)
 	- openssh <unfixed>
 	TODO: check
@@ -515,10 +514,12 @@
 	NOTE: details and patch at https://bugzilla.redhat.com/659676
 CVE-2010-4261 (Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ...)
 	- clamav 0.96.5+dfsg-1
-	[lenny] - clamav <end-of-life>
+	[lenny] - clamav <not-affected> (icon extractor not yet present)
+	NOTE: Fixed in 1f3db7f074995bd4e1d0183b2db8b1c472d2f41b
 CVE-2010-4260 (Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV ...)
 	- clamav 0.96.5+dfsg-1
-	[lenny] - clamav <end-of-life>
+	[lenny] - clamav <not-affected> (Introduced in 3643f3d2b0a38fdc7bc6777d093c857b9760804e)
+	NOTE: Fixed in 019f1955194360600ecf0644959ceca6734c2d7b
 CVE-2010-4259 (Stack-based buffer overflow in FontForge 20100501 allows remote ...)
 	- fontforge 0.0.20100501-4 (bug #605537)
 CVE-2010-4258 [linux failure to revert address limit override in OOPS error path]