[Secure-testing-commits] r15480 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-10-18 07:30:20 +0000 (Mon, 18 Oct 2010)
New Revision: 15480

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
- openarena/libjpeg code copy fixed in experimental
- python2.5 fixed
- tiff fixed
- wireshark fixed in sid, testing needs a tpu upload


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-10-16 17:09:00 UTC (rev 15479)
+++ data/CVE/list	2010-10-18 07:30:20 UTC (rev 15480)
@@ -1300,8 +1300,7 @@
 	RESERVED
 CVE-2010-3445 [wireshark: BER dissector]
 	RESERVED
-	- wireshark <unfixed> (low)
-	[lenny] - wireshark <no-dsa> (Only leads to a crash)
+	- wireshark 1.2.11-3 (low)
 	NOTE: http://archives.neohapsis.com/archives/bugtraq/2010-09/0088.html
 CVE-2010-3444 [pfribidi buffer overflow]
 	RESERVED
@@ -2314,7 +2313,7 @@
 CVE-2010-3088 (The notify function in pidgin-knotify.c in the pidgin-knotify plugin ...)
 	TODO: check
 CVE-2010-3087 (LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote ...)
-	- tiff <unfixed> (bug #600188)
+	- tiff 3.9.4-5 (bug #600188)
 	[lenny] - tiff <not-affected> (Vulnerable code not present)
 CVE-2010-3086
 	RESERVED
@@ -4907,7 +4906,7 @@
 	- python3.1 3.1.2+20100706-1 (low)
 	- python2.7 2.7-1 (low)
 	- python2.6 2.6.5+20100706-1 (low)
-	- python2.5 <unfixed> (low; bug #599739)
+	- python2.5 2.5.5-10 (low; bug #599739)
 	[lenny] - python2.5 <no-dsa> (Minor issue)
 	- python2.4 <removed> (low)
 	[lenny] - python2.4 <no-dsa> (Minor issue)
@@ -6171,7 +6170,7 @@
 	- python3.1 3.1.2+20100822-1 (low)
 	- python2.7 2.7-1 (low)
 	- python2.6 2.6.6-1 (low)
-	- python2.5 <unfixed> (low; bug #599739)
+	- python2.5 2.5.5-10 (low; bug #599739)
 	[lenny] - python2.5 <no-dsa> (Minor issue)
 	- python2.4 <removed> (low)
 	[lenny] - python2.4 <no-dsa> (Minor issue)

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2010-10-16 17:09:00 UTC (rev 15479)
+++ data/embedded-code-copies	2010-10-18 07:30:20 UTC (rev 15480)
@@ -1888,7 +1888,7 @@
 	- dcmtk <unfixed>
 	- gdcm <unfixed>
 	- insighttoolkit <unfixed>
-	- openarena <unfixed> (bug #495966)
+	- openarena 0.8.5-5+exp1 (bug #495966)
 	- outguess <unfixed>
 	- squeak-vm <unfixed> (embed)
 	- tremulous <unfixed>