[Secure-testing-commits] r15054 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-07-29 04:21:12 +0000 (Thu, 29 Jul 2010)
New Revision: 15054

Modified:
   data/CVE/list
Log:
mediawiki fixed
new issues in openjdk
new issue in pidgin


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-29 01:47:04 UTC (rev 15053)
+++ data/CVE/list	2010-07-29 04:21:12 UTC (rev 15054)
@@ -1,3 +1,7 @@
+CVE-2010-XXXX [flaw that allows unsigned code to access any file on the machine (accessible to the user) and write to it.]
+	- openjdk-6  6b18-1.8.1-1
+CVE-2010-XXXX [flaw in NetX that allows arbitrary unsigned apps to set any java property]
+	- openjdk-6  6b18-1.8.1-1
 CVE-2010-XXXX [zabbix XSS via formatQuery() of class.curl.php]
 	- zabbix <unfixed>
 	NOTE: https://support.zabbix.com/browse/ZBX-2326
@@ -108,7 +112,7 @@
 CVE-2009-4958 (SQL injection vulnerability in video.php in EMO Breader Manager allows ...)
 	NOT-FOR-US: EMO Breader Manager
 CVE-2010-XXXX [mediawiki XSS and data leakage]
-	- mediawiki <unfixed>
+	- mediawiki 1:1.15.5-1
 	NOTE: http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html
 	NOTE: CVEs requested
 CVE-2010-XXXX [dovecot Maildir ACL issue]
@@ -921,8 +925,9 @@
 	- iputils 3:20100418-2
 	[lenny] - iputils <no-dsa> (Minor issue)
 	TODO: next point update: [lenny] - iputils 3:20071127-1+lenny1
-CVE-2010-2528
+CVE-2010-2528 [pidgin]
 	RESERVED
+	- pidgin 2.7.2-1
 CVE-2010-2527
 	RESERVED
 	{DSA-2070-1}