[Secure-testing-commits] r14119 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2010-02-17 21:14:27 +0000 (Wed, 17 Feb 2010)
New Revision: 14119

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-17 19:59:27 UTC (rev 14118)
+++ data/CVE/list	2010-02-17 21:14:27 UTC (rev 14119)
@@ -1433,8 +1433,7 @@
 	NOT-FOR-US: Cisco CiscoWorks Internetwork Performance Monitor
 CVE-2010-0137 (Unspecified vulnerability in the sshd_child_handler process in the SSH ...)
 	NOT-FOR-US: Cisco IOS XR
-CVE-2010-0136
-	RESERVED
+CVE-2010-0136 (OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce ...)
 	{DSA-1995-1}
 	- openoffice.org 1:3.1.1-11
 CVE-2010-0135
@@ -5233,12 +5232,10 @@
 CVE-2009-3303 (Cross-site scripting (XSS) vulnerability in www/help/tracker.php in ...)
 	{DSA-1937-1}
 	- gforge 4.8.1-3 (low)
-CVE-2009-3302
-	RESERVED
+CVE-2009-3302 (filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows ...)
 	{DSA-1995-1 DTSA-205-1}
 	- openoffice.org 1:3.1.1-16
-CVE-2009-3301
-	RESERVED
+CVE-2009-3301 (Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) ...)
 	{DSA-1995-1 DTSA-205-1}
 	- openoffice.org 1:3.1.1-16
 CVE-2009-3300 (Multiple cross-site scripting (XSS) vulnerabilities in the Identity ...)
@@ -6622,12 +6619,10 @@
 	NOT-FOR-US: ezContents
 CVE-2008-7053 (LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows ...)
 	NOT-FOR-US: LogMeIn
-CVE-2009-2950
-	RESERVED
+CVE-2009-2950 (Heap-based buffer overflow in the ...)
 	{DSA-1995-1 DTSA-205-1}
 	- openoffice.org 1:3.1.1-16
-CVE-2009-2949
-	RESERVED
+CVE-2009-2949 (Integer overflow in the XPMReader::ReadXPM function in ...)
 	{DSA-1995-1 DTSA-205-1}
 	- openoffice.org 1:3.1.1-16
 CVE-2009-2948 (mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before ...)
@@ -14243,7 +14238,7 @@
 CVE-2009-0690 (The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit ...)
 	NOT-FOR-US: Foxit JPEG2000/JBIG2 Decoder add-on
 CVE-2009-0689 (Array index error in the (1) dtoa implementation in dtoa.c (aka ...)
-	{DSA-1931-1}
+	{DSA-1998-1 DSA-1931-1}
 	- nspr 4.8-2
 	[etch] - nspr <end-of-life> (Mozilla packages from oldstable no longer covered by security support)
 	- kdelibs 4:3.5.10.dfsg.1-3 (medium; bug #559265)