[Secure-testing-commits] r15561 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-11-03 22:01:37 +0000 (Wed, 03 Nov 2010)
New Revision: 15561

Modified:
   data/CVE/list
Log:
filed bug for slurm
one iceweasel issue doesn't affect sid


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-11-03 21:45:54 UTC (rev 15560)
+++ data/CVE/list	2010-11-03 22:01:37 UTC (rev 15561)
@@ -1912,9 +1912,8 @@
 CVE-2010-3381 (The (1) tangerine and (2) tangerine-properties scripts in Tangerine ...)
 	- tangerine 0.3.2.2-6 (bug #598302)
 CVE-2010-3380 (The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before ...)
-	- slurm-llnl <unfixed>
+	- slurm-llnl <unfixed> (bug #602340)
 	NOTE: Debian package ships its own, also vulnerable, init script. NOT fixed in 2.1.14-1
-	NOTE: http://sourceforge.net/projects/slurm/files//slurm/version_2.1/2.1.14/RELEASE_NOTES_2.1.14/view
 CVE-2010-3379
 	RESERVED
 CVE-2010-3378 (The (1) scilab, (2) scilab-cli, and (3) scilab-adv-cli scripts in ...)
@@ -2405,7 +2404,7 @@
 	[lenny] - xulrunner <not-affected> (bug in optimization added later)
 CVE-2010-3182 (A certain application-launch script in Mozilla Firefox before 3.5.14 ...)
 	- icedove 3.0.9-1
-	TODO: check, does this really affect our build?
+	- iceweasel <not-affected> (run-mozilla.sh not used)
 CVE-2010-3181 (Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 ...)
 	- iceweasel <not-affected> (Windows-specific)
 CVE-2010-3180 (Use-after-free vulnerability in the nsBarProp function in Mozilla ...)