[Secure-testing-commits] r14961 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2010-07-05 09:01:37 +0000 (Mon, 05 Jul 2010)
New Revision: 14961

Modified:
   data/CVE/list
Log:
exim4 issues fixed in unstable
CVE-2009-0374 is unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-04 19:52:09 UTC (rev 14960)
+++ data/CVE/list	2010-07-05 09:01:37 UTC (rev 14961)
@@ -1455,10 +1455,10 @@
 CVE-2010-2025 (Multiple cross-site request forgery (CSRF) vulnerabilities in the web ...)
 	NOT-FOR-US: Cisco
 CVE-2010-2024 (transports/appendfile.c in Exim before 4.72, when MBX locking is ...)
-	- exim4 <unfixed> (low)
+	- exim4 4.72-1 (low)
 	NOTE: Fixed in experimental, both seem no-dsa, but should be checked with maintainers
 CVE-2010-2023 (transports/appendfile.c in Exim before 4.72, when a world-writable ...)
-	- exim4 <unfixed> (low)
+	- exim4 4.72-1 (low)
 	NOTE: Fixed in experimental, both seem no-dsa, but should be checked with maintainers
 CVE-2010-2022 (jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the &quot;-l -U ...)
 	- kfreebsd-6 <not-affected> (jail binary not yet provided, see bug #584930)
@@ -21443,7 +21443,7 @@
 CVE-2009-0375 (Buffer overflow in a DLL file in RealNetworks RealPlayer 10, ...)
 	NOT-FOR-US: RealPlayer
 CVE-2009-0374 (** DISPUTED ** ...)
-	- chromium-browser <unfixed> (low)
+	- chromium-browser <unfixed> (unimportant)
 	- webkit <not-affected> (poc doesn't work)
 CVE-2009-0373 (SQL injection vulnerability in the ElearningForce Flash Magazine ...)
 	NOT-FOR-US: Joomla