[Secure-testing-commits] r14350 - in data: . CVE

[Nico Golde]

Author: nion
Date: 2010-03-29 14:23:55 +0000 (Mon, 29 Mar 2010)
New Revision: 14350

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
lesstif embeds xpm, bug added
cleanup CVE-2010-0733 (postgresql)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-29 10:06:21 UTC (rev 14349)
+++ data/CVE/list	2010-03-29 14:23:55 UTC (rev 14350)
@@ -1085,12 +1085,8 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2010/03/16/11
 	NOTE: depends on the application that uses libcurl
 CVE-2010-0733 (Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL ...)
-	- postgresql-7.4 <undetermined>
-	- postgresql-8.1 <undetermined>
-	- postgresql-8.2 <undetermined>
-	- postgresql-8.3 <undetermined>
-	- postgresql-8.4 <undetermined>
-	TODO: check
+	- postgresql-8.3 <unfixed> (low)
+	- postgresql-8.4 8.4.2-1
 CVE-2010-0732 (gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver ...)
 	- gtk+2.0 2.18.5-1
 	[lenny] - gtk+2.0 <not-affected> (issue only exposed by gnome-screensaver 2.28)

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2010-03-29 10:06:21 UTC (rev 14349)
+++ data/embedded-code-copies	2010-03-29 14:23:55 UTC (rev 14350)
@@ -191,7 +191,7 @@
 
 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
 	- openmotif <unfixed> (embed)
-	- libxpm <unfixed> (embed)
+	- libxpm <unfixed> (embed; bug #575750)
 
 kerberized apps with BSD origin
 	- krb4 <removed> (embed)