[Secure-testing-commits] r15467 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-10-13 07:06:23 +0000 (Wed, 13 Oct 2010)
New Revision: 15467

Modified:
   data/CVE/list
Log:
- new Java issues, openjdk already fixed
- new mercurial issue
- tuxguitar fixed and no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-10-12 21:18:02 UTC (rev 15466)
+++ data/CVE/list	2010-10-13 07:06:23 UTC (rev 15467)
@@ -1,3 +1,5 @@
+CVE-2010-XXXX
+	- mercurial 1.6.4-1 (low; bug #598841)
 CVE-2010-3840
 	RESERVED
 	- mysql-5.1 <unfixed> (bug #599937)
@@ -709,58 +711,126 @@
 	RESERVED
 CVE-2010-3574
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3573
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3572
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3571
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3570
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3569
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3568
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3567
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3566
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3565
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3564
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
 CVE-2010-3563
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3562
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3561
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3560
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3559
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3558
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3557
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3556
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3555
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3554
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3553
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3552
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3551
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3550
 	RESERVED
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3549
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3548
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3547
 	RESERVED
 CVE-2010-3546
@@ -775,6 +845,9 @@
 	RESERVED
 CVE-2010-3541
 	RESERVED
+	- openjdk-6 6b18-1.8.2-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-3540
 	RESERVED
 CVE-2010-3539
@@ -1139,7 +1212,8 @@
 	- ust <unfixed> (bug #598309)
 CVE-2010-3385
 	RESERVED
-	- tuxguitar <unfixed> (bug #598307)
+	- tuxguitar 1.2-7 (bug #598307)
+	[lenny] - tuxguitar <no-dsa> (Minor issue)
 CVE-2010-3384
 	RESERVED
 	- torcs 1.3.1-5 (bug #598306)
@@ -6848,6 +6922,8 @@
 	{DSA-2052-1}
 	- krb5 1.8.1+dfsg-3 (low; bug #582261)
 	- heimdal 1.4.0~git20100605.dfsg.1-1
+	- sun-java6 <unfixed> 
+	[lenny] - sun-java6 <no-dsa> (Non-free not supported)
 CVE-2010-1320 (Double free vulnerability in do_tgs_req.c in the Key Distribution ...)
 	- krb5 1.8.1+dfsg-2 (bug #577490)
 	[lenny] - krb5 <not-affected> (Only affects 1.7/1.8)
@@ -13753,7 +13829,8 @@
 	- nss 3.12.6-1
 	- sun-java5 <removed>
 	- sun-java6 6.19-1
-	- openjdk-6 <unfixed>
+	NOTE: Update 21 for Sun Java implemented the new RFC extension
+	- openjdk-6 6b18-1.8.2-1
 	- nginx 0.7.64-1
 	- matrixssl 1.8.8-1
 	- tomcat-native 1.1.18-1