[Secure-testing-commits] r14838 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-06-09 21:26:56 +0000 (Wed, 09 Jun 2010)
New Revision: 14838

Modified:
   data/CVE/list
Log:
rpm CVEfied
historic dpkg issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-06-09 21:23:22 UTC (rev 14837)
+++ data/CVE/list	2010-06-09 21:26:56 UTC (rev 14838)
@@ -41,15 +41,18 @@
 CVE-2010-2200
 	RESERVED
 CVE-2010-2199 (lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the ...)
-	TODO: check
+	- rpm <unfixed> (bug #584257; unimportant)
+	NOTE: Marking as unimportant since rpm isn't used as a package manager
 CVE-2010-2198 (lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the ...)
-	TODO: check
+	- rpm <unfixed> (bug #584257; unimportant)
+	NOTE: Marking as unimportant since rpm isn't used as a package manager
 CVE-2010-2197 (rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax ...)
 	TODO: check
 CVE-2005-4889 (lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of ...)
-	TODO: check
+	- rpm 4.7.0-1 (bug #584257; unimportant)
+	NOTE: Marking as unimportant since rpm isn't used as a package manager
 CVE-2004-2768 (dpkg 1.9.21 does not properly reset the metadata of a file during ...)
-	TODO: check
+	- dpkg 1.10.19 (bug #225692)
 CVE-2010-2196
 	RESERVED
 CVE-2010-2195
@@ -229,9 +232,6 @@
 	- eglibc 2.11.1-1 (unimportant)
 	- glibc <removed>
 	NOTE: http://sourceware.org/git/?p=glibc.git;a=commit;h=199eb0de8d673fb23aa127721054b4f1803d61f3
-CVE-2010-XXXX [rpm setuid handling]
-	- rpm <unfixed> (bug #584257; unimportant)
-	NOTE: Marking as unimportant since rpm isn't used as a package manager
 CVE-2010-2116 (The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 ...)
 	NOT-FOR-US: McAfee Email Gateway
 CVE-2010-2115 (SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a ...)