[Secure-testing-commits] r15302 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-09-10 07:03:43 +0000 (Fri, 10 Sep 2010)
New Revision: 15302

Modified:
   data/CVE/list
Log:
- new kernel issue
- NFUs
- kvm no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-09-09 21:15:10 UTC (rev 15301)
+++ data/CVE/list	2010-09-10 07:03:43 UTC (rev 15302)
@@ -681,9 +681,9 @@
 CVE-2010-3006
 	RESERVED
 CVE-2010-3005 (Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on ...)
-	TODO: check
+	NOT-FOR-US: HP Operations Agents
 CVE-2010-3004 (Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on ...)
-	TODO: check
+	NOT-FOR-US: HP Operations Agents
 CVE-2010-3003
 	RESERVED
 CVE-2010-3002 (Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 ...)
@@ -996,6 +996,7 @@
 	RESERVED
 CVE-2010-2883
 	RESERVED
+	NOT-FOR-US: Adobe Reader
 CVE-2010-2882 (DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not ...)
 	NOT-FOR-US: Adobe Shockwave Player
 CVE-2010-2881 (IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not ...)
@@ -1264,7 +1265,8 @@
 	- kvirc 4:4.0.0-3
 CVE-2010-2784 (The subpage MMIO initialization functionality in the subpage_register ...)
 	- qemu-kvm <unfixed> (bug #594478)
-	- kvm <undetermined>
+	- kvm <removed>
+	[lenny] - kvm <no-dsa> (Minor impact, will be fixed in a point release)
 CVE-2010-2783
 	RESERVED
 	- openjdk-6 6b18-1.8.1-1
@@ -2095,7 +2097,7 @@
 CVE-2010-2493 (The default configuration of the deployment descriptor (aka web.xml) ...)
 	- jbossas4 <not-affected> (Only builds a few libraries, not the full application server, #581226)
 CVE-2010-2492 (Buffer overflow in the ecryptfs_uid_hash macro in ...)
-	TODO: check
+	- linux-2.6 <unfixed>
 CVE-2010-2491 [roundup XSS]
 	RESERVED
 	- roundup 1.4.13-3.1 (bug #590769)