[Secure-testing-commits] r15060 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-07-29 15:42:23 +0000 (Thu, 29 Jul 2010)
New Revision: 15060

Modified:
   data/CVE/list
Log:
nginx windows specific
new typo issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-29 08:08:36 UTC (rev 15059)
+++ data/CVE/list	2010-07-29 15:42:23 UTC (rev 15060)
@@ -1,3 +1,5 @@
+CVE-2010-XXXX [Multiple security issues]
+	- typo3-src <unfixed> (bug #590719)
 CVE-2010-XXXX [flaw that allows unsigned code to access any file on the machine (accessible to the user) and write to it.]
 	- openjdk-6  6b18-1.8.1-1
 CVE-2010-XXXX [flaw in NetX that allows arbitrary unsigned apps to set any java property]
@@ -1039,7 +1041,7 @@
 	RESERVED
 CVE-2010-2491 [roundup XSS]
 	RESERVED
-	- roundup <unfixed> (bug filed)
+	- roundup <unfixed> (bug #590769)
 	NOTE: http://bugs.gentoo.org/show_bug.cgi?id=326395
 	NOTE: http://roundup.svn.sourceforge.net/viewvc/roundup?view=revision&revision=4486
 CVE-2010-2490 [murmur DoS via malformed client query]
@@ -1564,7 +1566,7 @@
 CVE-2010-2267 (Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web ...)
 	NOT-FOR-US: Accoria Web Server
 CVE-2010-2266 (nginx 0.8.36 allows remote attackers to cause a denial of service ...)
-	- nginx <unfixed> (bug #590768)
+	- nginx <not-affected> (Confirmed Windows only, see bug #590768)
 CVE-2009-4895 [linux tty null ptr dereference]
 	RESERVED
 	- linux-2.6 2.6.32-9