[Secure-testing-commits] r15055 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-07-29 04:29:43 +0000 (Thu, 29 Jul 2010)
New Revision: 15055

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
- qt issue got a separate CVE ID
- mako fixed in sid, no-dsa for Lenny


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-29 04:21:12 UTC (rev 15054)
+++ data/CVE/list	2010-07-29 04:29:43 UTC (rev 15055)
@@ -1047,8 +1047,6 @@
 	RESERVED
 	- mumble 1.2.2-4 (bug #587713)
 	[lenny] - mumble <no-dsa> (Minor issue)
-	- qt4-x11 <undetermined> (low; bug #587713)
-	NOTE: unclear whether is qt's or sqlite's fault
 CVE-2010-2489 (Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow ...)
 	- ruby1.8 <not-affected> (Windows-specific)
 	- ruby1.9.1 <not-affected> (Windows-specific)
@@ -1073,9 +1071,8 @@
 CVE-2010-2481 (The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly ...)
 	- tiff 3.9.4-1 (unimportant)
 CVE-2010-2480 (Mako before 0.3.4 relies on the cgi.escape function in the Python ...)
-	- python-mako <undetermined>
-	TODO: check
-	NOTE: http://bugs.python.org/issue9061
+	- mako 0.3.4-1 (low)
+	[lenny] - mako <no-dsa> (Minor issue)
 CVE-2010-2478 [kernel buffer overflow in ETHTOOL_GRXCLSRLALL]
 	RESERVED
 	- linux-2.6 <unfixed>

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2010-07-29 04:21:12 UTC (rev 15054)
+++ data/spu-candidates.txt	2010-07-29 04:29:43 UTC (rev 15055)
@@ -277,6 +277,11 @@
 
 --
 
+mako (CVE-2010-2480)
+http://bugs.python.org/issue9061
+
+--
+
 maradns
 http://maradns.org/download/maradns-1.4.02-parse_segfault.patch
 notified maintainer