[Secure-testing-commits] r15398 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-09-30 09:22:29 +0000 (Thu, 30 Sep 2010)
New Revision: 15398

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
- ardour and magics++ fixed
- bristol and ardour not in Lenny, remove no-dsa tags and spu-candidates entry
- bug filed for mysql


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-09-30 09:15:39 UTC (rev 15397)
+++ data/CVE/list	2010-09-30 09:22:29 UTC (rev 15398)
@@ -29,52 +29,36 @@
 	NOT-FOR-US: Synology Disk Station
 CVE-2010-3683
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3682
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3681
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3680
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3679
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3678
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3677
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3676
 	RESERVED
-	- mysql-5.1 <unfixed>
+	- mysql-5.1 <unfixed> (bug #598580)
 	- mysql-dfsg-5.0 <unfixed>
-	TODO: check
-	NOTE: see Pine.GSO.4.64.1009281803250.24337 at faron.mitre.org
 CVE-2010-3675
 	RESERVED
 CVE-2010-3658
@@ -614,7 +598,7 @@
 	[lenny] - abcm2ps <no-dsa> (Minor issue)
 CVE-2010-3440 [babiloo insecure downloading and unpacking of dictionary files]
 	RESERVED
-	- babiloo <unfixed> (low; bug #591995)
+	- babiloo 2.0.11-1 (low; bug #591995)
 CVE-2010-3439 [alien-arena: server dos]
 	RESERVED
 	- alien-arena 7.33-5 (low; bug #575621)
@@ -778,7 +762,7 @@
 	- texmacs <unfixed> (bug #598424)
 CVE-2010-3393
 	RESERVED
-	- magics++ <unfixed> (bug #598418)
+	- magics++ 2.10.0.dfsg-5 (bug #598418)
 CVE-2010-3392
 	RESERVED
 CVE-2010-3391
@@ -899,14 +883,12 @@
 CVE-2010-3351
 	RESERVED
 	- bristol 0.60.5-2 (bug #598285)
-	[lenny] - bristol <no-dsa> (Minor issue)
 CVE-2010-3350
 	RESERVED
 	- bareftp <unfixed> (bug #598284)
 CVE-2010-3349
 	RESERVED
 	- ardour 1:2.8.11-2 (low; bug #598282)
-	[lenny] - ardour <no-dsa> (Minor issue)
 CVE-2010-3348
 	RESERVED
 CVE-2010-3347

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2010-09-30 09:15:39 UTC (rev 15397)
+++ data/spu-candidates.txt	2010-09-30 09:22:29 UTC (rev 15398)
@@ -26,11 +26,6 @@
 
 --
 
-ardour (CVE-2010-3349)
-#598282
-
---
-
 asterisk (CVE-2009-0041)
 #513413
 notified maintainer
@@ -53,11 +48,6 @@
 
 --
 
-bristol (CVE-2010-3351)
-#598285
-
---
-
 bugzilla (CVE-2009-0481 to CVE-2009-0485)
 notified maintainer