[Secure-testing-commits] r14206 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-03-07 16:40:56 +0000 (Sun, 07 Mar 2010)
New Revision: 14206

Modified:
   data/CVE/list
   data/embedded-code-copies
   data/spu-candidates.txt
Log:
- mp4h fixed
- fcron no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-07 09:14:54 UTC (rev 14205)
+++ data/CVE/list	2010-03-07 16:40:56 UTC (rev 14206)
@@ -361,11 +361,11 @@
 	RESERVED
 CVE-2010-0793
 	RESERVED
-CVE-2010-0792 [fcron info disclosure]
+CVE-2010-0792 [fcrontab information disclosure]
 	RESERVED
-	- fcron <undetermined>
+        - fcron <unfixed> (low; bug #572587)
+        [lenny] - fcron <no-dsa> (Minor issue)
 	NOTE: http://seclists.org/fulldisclosure/2010/Mar/97
-	TODO: check
 CVE-2010-0791 [ncpfs denial-of-service]
 	RESERVED
 	- ncpfs <undetermined>
@@ -4756,7 +4756,7 @@
 	- libtunepimp 0.5.3-7.3 (low; bug #559821)
 	[lenny] - libtunepimp <no-dsa> (Minor issue)
 	[etch] - libtunepimp <no-dsa> (Minor issue)
-	- mp4h <unfixed> (low; bug #559822)
+	- mp4h 1.3.1-4.1 (low; bug #559822)
 	[etch] - mp4h <no-dsa> (Minor issue)
 	[lenny] - mp4h <no-dsa> (Minor issue)
 	- naim <removed> (low; bug #559823)

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2010-03-07 09:14:54 UTC (rev 14205)
+++ data/embedded-code-copies	2010-03-07 16:40:56 UTC (rev 14206)
@@ -1600,7 +1600,7 @@
 	- libextractor 0.5.23+dfsg-4 (embed)
 	- libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
 	- libtunepimp 0.5.3-7.3 (embed)
-	- mp4h <unfixed> (embed)
+	- mp4h 1.3.1-4.1 (embed)
 	- naim <removed> (embed)
 	- parser-mysql <unfixed> (embed)
 	- pinball 0.3.1-11 (embed)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2010-03-07 09:14:54 UTC (rev 14205)
+++ data/spu-candidates.txt	2010-03-07 16:40:56 UTC (rev 14206)
@@ -290,11 +290,6 @@
 
 --
 
-open-iscsi (CVE-2009-1297)
-notified maintainer in initial bug report
-
---
-
 openldap
 #253838
 notified maintainer