[Secure-testing-commits] r14950 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2010-07-02 16:53:39 +0000 (Fri, 02 Jul 2010)
New Revision: 14950

Modified:
   data/CVE/list
Log:
new roundup issue
mumble issue update


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-02 16:41:59 UTC (rev 14949)
+++ data/CVE/list	2010-07-02 16:53:39 UTC (rev 14950)
@@ -1,3 +1,8 @@
+CVE-2010-XXXX [roundup XSS]
+	- roundup <undetermined>
+	NOTE: http://bugs.gentoo.org/show_bug.cgi?id=326395
+	NOTE: http://roundup.svn.sourceforge.net/viewvc/roundup?view=revision&revision=4486
+	TODO: check
 CVE-2010-2598 [crasher: ojpeg]
 	RESERVED
 	- tiff <unfixed> (unimportant)
@@ -125,13 +130,15 @@
 CVE-2010-2517 (Multiple unspecified vulnerabilities in IBM Rational ClearQuest before ...)
 	TODO: check
 CVE-2010-XXXX [murmur DoS via malformed client query]
-	- mumble <unfixed> (low; bug #587713)
-	TODO: request id
+	- qt4-x11 <undetermined> (low; bug #587713)
+	- sqlite3 <undetermined>
+	NOTE: id requested - unclear whether is qt's or sqlite's fault
+	TODO: check
 	NOTE: http://aluigi.altervista.org/adv/mumbleed-adv.txt
 	NOTE: BID 41251, SA40385
 CVE-2010-XXXX [resource consumption in QSslSocketBackendPrivate::transmit()]
 	- qt4-x11 <unfixed> (bug #587711)
-	TODO: request id
+	NOTE: id requested
 	NOTE: http://aluigi.altervista.org/adv/qtsslame-adv.txt
 	NOTE: BID 41250, SA40389
 CVE-2010-2516 (Multiple SQL injection vulnerabilities in 2daybiz Multi Level ...)