[Secure-testing-commits] r14208 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-03-07 18:47:06 +0000 (Sun, 07 Mar 2010)
New Revision: 14208

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
- filed bug for ncpfs issues, no-dsa for Lenny
- fcron maintainers notified for no-dsa status


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-07 17:44:14 UTC (rev 14207)
+++ data/CVE/list	2010-03-07 18:47:06 UTC (rev 14208)
@@ -368,20 +368,21 @@
 	NOTE: http://seclists.org/fulldisclosure/2010/Mar/97
 CVE-2010-0791 [ncpfs denial-of-service]
 	RESERVED
-	- ncpfs <undetermined>
+	- ncpfs <unfixed> (bug filed)
+	[lenny] - ncpfs <no-dsa> (Minor issue)
 	NOTE: http://seclists.org/fulldisclosure/2010/Mar/122
-	TODO: check
 CVE-2010-0790 [ncpmount info disclosure]
 	RESERVED
-	- ncpfs <undetermined>
+	- ncpfs <unfixed>
+	[lenny] - ncpfs <no-dsa> (Minor issue)
 	NOTE: http://seclists.org/fulldisclosure/2010/Mar/122
-	TODO: check
 CVE-2010-0789 (fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local ...)
 	{DSA-1989-1}
 	- fuse 2.8.1-1.2 (bug #567633)
 	NOTE: Initial DSA released as CVE-2009-3297
 CVE-2010-0788 (ncpfs 2.2.6 allows local users to cause a denial of service, obtain ...)
-	- ncpfs <unfixed>
+	- ncpfs <unfixed> (bug filed)
+	[lenny] - ncpfs <no-dsa> (Minor issue)
 CVE-2010-0787 (client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, ...)
 	{DSA-2004-1}
 	- samba 2:3.4.5~dfsg-2 (bug #567554)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2010-03-07 17:44:14 UTC (rev 14207)
+++ data/spu-candidates.txt	2010-03-07 18:47:06 UTC (rev 14208)
@@ -95,6 +95,12 @@
 
 --
 
+fcron (CVE-2010-0791)
+#572587
+notified maintainer through initial bugreport
+
+--
+
 libgnucrypto-java (CVE-2008-5659) 
 #559789
 removed