[Secure-testing-commits] r14835 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-06-09 17:10:35 +0000 (Wed, 09 Jun 2010)
New Revision: 14835

Modified:
   data/CVE/list
Log:
bugs filed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-06-09 16:50:43 UTC (rev 14834)
+++ data/CVE/list	2010-06-09 17:10:35 UTC (rev 14835)
@@ -329,10 +329,9 @@
 CVE-2010-2061
 	RESERVED
 CVE-2010-2060 (The put command functionality in beanstalkd 1.4.5 and earlier allows ...)
-	- beanstalkd <unfixed>
+	- beanstalkd <unfixed> (bug #585162)
 	NOTE: Package description reads: "Beanstalkd is meant to be ran in a trusted network,
 	NOTE: "as it has no authorisation/authentication mechanisms". So this is likely a non-issue
-	TODO: File bug
 CVE-2010-2059
 	RESERVED
 CVE-2010-2058 (setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable ...)
@@ -732,7 +731,9 @@
 CVE-2010-1916 (The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 ...)
 	- serendipity 1.5.3-1
 	[lenny] - serendipity <not-affected> (Only affects >= 1.4)
-	TODO: check the embedded copies of Xinha
+	- horde3 <undetermined> (bug #585165)
+	- openacs <undetermined> (bug #585163)
+	- dotlrn <undetermined> (bug #585164)
 CVE-2010-1915 (The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through ...)
 	- php5 <unfixed> (unimportant)
 CVE-2010-1914 (The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows ...)