[Secure-testing-commits] r14635 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-05-08 03:09:34 +0000 (Sat, 08 May 2010)
New Revision: 14635

Modified:
   data/CVE/list
Log:
texlive bug numbers

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-05-07 21:23:22 UTC (rev 14634)
+++ data/CVE/list	2010-05-08 03:09:34 UTC (rev 14635)
@@ -1033,9 +1033,9 @@
 	RESERVED
 	- vlc 1.0.6-1
 	NOTE: http://www.videolan.org/security/sa1003.html
-CVE-2010-1440
+CVE-2010-1440 [integer overflow]
 	RESERVED
-	- texlive-bin <unfixed> (low)
+	- texlive-bin <unfixed> (low; bug #580668)
 CVE-2010-1439
 	RESERVED
 CVE-2010-1438 (Web Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames ...)
@@ -2720,8 +2720,7 @@
 	- moin 1.9.2-3 (low; bug #575995)
 CVE-2010-0827 [dvips integer overflow]
 	RESERVED
-	NOTE: http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log
-	- texlive-bin <unfixed> (low)
+	- texlive-bin <unfixed> (low; bug #580669)
 	[lenny] - texlive-bin <no-dsa> (minor issue)
 CVE-2010-0826 (The Free Software Foundation (FSF) Berkeley DB NSS module (aka ...)
 	- libnss-db <unfixed> (low; bug #577057)
@@ -2992,8 +2991,7 @@
 	[lenny] - openssl <not-affected> (only 0.9.8m is affected with 16 bit shorts)
 	NOTE: http://www.openssl.org/news/secadv_20100324.txt
 CVE-2010-0739 (Integer overflow in the predospecial function in dospecial.c in dvips ...)
-	NOTE: http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log
-	- texlive-bin <unfixed> (low)
+	- texlive-bin <unfixed> (low; bug #560668)
 	[lenny] - texlive-bin <no-dsa> (minor issue)
 CVE-2010-0738 (The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise ...)
 	- jbossas4 <undetermined>