[Secure-testing-commits] r14326 - data/CVE

[Nico Golde]

Author: nion
Date: 2010-03-26 12:01:33 +0000 (Fri, 26 Mar 2010)
New Revision: 14326

Modified:
   data/CVE/list
Log:
CVE-2010-0302 fixed in cups 1.4.2-10
xar removed (CVE-2010-0055)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-26 09:14:45 UTC (rev 14325)
+++ data/CVE/list	2010-03-26 12:01:33 UTC (rev 14326)
@@ -2368,7 +2368,7 @@
 	{DSA-1982-1}
 	- hybserv 1.9.2-4.1 (low; bug #550389)
 CVE-2010-0302 (Use-after-free vulnerability in the abstract file-descriptor handling ...)
-	- cups <unfixed> (bug #572940)
+	- cups 1.4.2-10 (bug #572940)
 	[lenny] - cups <no-dsa> (Minor issue)
 	- cupsys <not-affected> (vulnerable code introduced in 1.3.x)
 	NOTE: This is for an incomplete fix for CVE-2009-3553
@@ -3603,7 +3603,7 @@
 	RESERVED
 CVE-2010-0055 [xar Signature verification bypass]
 	RESERVED
-	- xar <unfixed> (bug #572556)
+	- xar <removed> (bug #572556)
 	[lenny] - xar <no-dsa> (Minor issue)
 CVE-2010-0054 (Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 ...)
 	- webkit <undetermined> (bug #574064)