[Secure-testing-commits] r14965 - data/CVE

[Giuseppe Iuculano]

Author: iuculano
Date: 2010-07-06 16:03:38 +0000 (Tue, 06 Jul 2010)
New Revision: 14965

Modified:
   data/CVE/list
Log:
CVE-2010-2089 fixed in python3.1 python2.7 and python2.6
CVE-2010-1760 fixed in chromium-browser 5.0.375.99~r51029-2
CVE-2008-5983 fixed in python3.1 3.1.2+20100703-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-06 09:51:08 UTC (rev 14964)
+++ data/CVE/list	2010-07-06 16:03:38 UTC (rev 14965)
@@ -1276,9 +1276,9 @@
 CVE-2010-2090 (The npb_protocol_error function in sna V5router64 in IBM ...)
 	NOT-FOR-US: IBM Communications Server
 CVE-2010-2089 (The audioop module in Python 2.7 and 3.2 does not verify the ...)
-	- python3.1 <not-affected> (poc not effective)
-	- python2.7 <unfixed> (low)
-	- python2.6 <unfixed> (low)
+	- python3.1 3.1.2+20100706-1 (low)
+	- python2.7 2.7-1 (low)
+	- python2.6 2.6.5+20100706-1 (low)
 	- python2.5 <unfixed> (low)
 	[lenny] - python2.5 <no-dsa> (Minor issue)
 	- python2.4 <removed> (low)
@@ -2143,7 +2143,7 @@
 CVE-2010-1760
 	RESERVED
 	- webkit 1.2.1-3
-	- chromium-browser <undetermined>
+	- chromium-browser 5.0.375.99~r51029-2
 	NOTE: https://bugs.webkit.org/show_bug.cgi?id=37781
 	NOTE: http://trac.webkit.org/changeset/58409
 CVE-2010-1759 (Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on ...)
@@ -21855,7 +21855,7 @@
 	- dia 0.96.1-7.1 (low; bug #504251)
 	[etch] - dia <no-dsa> (Minor issue, only vulnerable when called from certain dir)
 CVE-2008-5983 (Untrusted search path vulnerability in the PySys_SetArgv API function ...)
-	- python3.1 <unfixed> (low; bug #575780)
+	- python3.1 3.1.2+20100703-1 (low; bug #575780)
 	- python2.6 2.6.5+20100529-1 (low; bug #572010)
 	- python2.5 <unfixed> (low)
 	[etch] - python2.5 <no-dsa> (Minor issue)