[Secure-testing-commits] r14061 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-02-08 17:48:00 +0000 (Mon, 08 Feb 2010)
New Revision: 14061

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
- bzr code copies fixed
- glibc issue not a vulnerability
- systemtap issue not in Etch


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-08 04:56:39 UTC (rev 14060)
+++ data/CVE/list	2010-02-08 17:48:00 UTC (rev 14061)
@@ -185,10 +185,7 @@
 	- nautilus <not-affected> (proof-of-concept script is previewed as text, not executed)
 	NOTE: http://seclists.org/fulldisclosure/2010/Feb/112
 CVE-2010-XXXX [samba: remote zero-day vulnerability]
-	- samba <unfixed> (high; bug #568493)
-CVE-2010-XXXX [glibc: house of mind vulnerability]
-	- eglibc 2.10.2-6 (medium; bug #568488)
-	- glibc <removed> (medium)
+	- samba <unfixed> (low; bug #568493)
 CVE-2010-XXXX [browser javascript document.write denial-of-service]
 	- xulrunner <unfixed> (unimportant; bug #568486)
 	- webkit <unfixed> (unimportant; bug #568485)
@@ -317,8 +314,8 @@
 	RESERVED
 CVE-2010-0411 [systemtap buffer overflow]
 	RESERVED
-	- systemtap <unfixed> (low)
-	[lenny] - systemtap <no-dsa> (Minor issue)
+	- systemtap <unfixed> (low; bug #568809)
+	[lenny] - systemtap <not-affected> (Vulnerable code not present)
 	[etch] - systemtap <no-dsa> (Minor issue)
 	NOTE: http://sourceware.org/bugzilla/show_bug.cgi?id=11234 and RH
 CVE-2010-0410 [kernel OOM via NETLINK_CONNECTOR]

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2010-02-08 04:56:39 UTC (rev 14060)
+++ data/embedded-code-copies	2010-02-08 17:48:00 UTC (rev 14061)
@@ -1180,7 +1180,7 @@
 	- gamera 3.2.3-1 (embed)
 
 configobj
-	- bzr <unfixed> (embed; bug #555336)
+	- bzr 2.1.0~rc2-1 (embed; bug #555336)
 	- elisa <unfixed> (embed; bug #555337)
 	- gaupol <unfixed> (embed; bug #555338)
 	- ipython <unfixed> (embed; bug #555339)
@@ -1233,7 +1233,7 @@
 elementtree
 	- python2.5 <unfixed> (embed)
 	- python2.6 <unfixed> (embed)
-	- bzr <unfixed> (embed; bug #555343)
+	- bzr 2.1.0~rc2-1 (embed; bug #555343)
 	- gedit 2.28.2-1 (embed; bug #555344)
 	- smart <unfixed> (embed)
 	- solfege <unfixed> (embed; bug #555345)