[Secure-testing-commits] r14957 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-07-04 10:49:25 +0000 (Sun, 04 Jul 2010)
New Revision: 14957

Modified:
   data/CVE/list
Log:
acidbase fixed in sid
w3m/ssl fixed in sid, spu


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-04 08:19:20 UTC (rev 14956)
+++ data/CVE/list	2010-07-04 10:49:25 UTC (rev 14957)
@@ -1324,8 +1324,9 @@
 CVE-2010-2075 (UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from ...)
 	- unrealircd <itp> (bug #515130)
 CVE-2010-2074 (istream.c in w3m 0.5.2 and possibly other versions, when ...)
-	- w3m <unfixed> (low; bug #587445)
+	- w3m 0.5.2-5 (low; bug #587445)
 	[lenny] - w3m <no-dsa> (Minor issue)
+	TODO: next point release: [lenny] - w3m 0.5.2-2+lenny1
 CVE-2010-2073 (auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and ...)
 	- pyftpd 0.8.5 (low; bug #585776)
 	[lenny] - pyftpd 0.8.4.6+lenny1
@@ -2246,7 +2247,7 @@
 CVE-2009-4840 (Heap-based buffer overflow in the IAManager ActiveX control in ...)
 	NOT-FOR-US: Roxio CinePlayer
 CVE-2009-4839 (Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis ...)
-	- acidbase <unfixed> (bug filed)
+	- acidbase 1.4.5-1 (bug filed)
 	[lenny] - acidbase <no-dsa> (Minor issue)
 CVE-2009-4838 (SQL injection vulnerability in base_ag_common.php in Basic Analysis ...)
 	- acidbase 1.4.4-1 (low)