[Secure-testing-commits] r16491 - data/CVE

[Nico Golde]

Author: nion
Date: 2011-04-07 16:02:14 +0000 (Thu, 07 Apr 2011)
New Revision: 16491

Modified:
   data/CVE/list
Log:
tmux cveified, add bug for CVE-2011-0465

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-04-07 09:18:45 UTC (rev 16490)
+++ data/CVE/list	2011-04-07 16:02:14 UTC (rev 16491)
@@ -201,9 +201,6 @@
 CVE-2011-XXXX [drupal6-mod-tagadelic XSS]
 	- drupal6-mod-tagadelic 1.3-1 (low)
 	NOTE: DRUPAL-SA-CONTRIB-2011-013
-CVE-2011-XXXX [tmux not properly dropping privileges]
-	- tmux 1.4-6 (bug #620304)
-	NOTE: CVE id requested
 CVE-2011-1557 (SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows ...)
 	NOT-FOR-US: ICloudCenter ICJobSite
 CVE-2011-1556 (SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's ...)
@@ -369,8 +366,9 @@
 	RESERVED
 CVE-2011-1497
 	RESERVED
-CVE-2011-1496
-	RESERVED
+CVE-2011-1496 [tmux not properly dropping privileges]
+	- tmux 1.4-6 (bug #620304)
+	NOTE: CVE id requested
 CVE-2011-1495
 	RESERVED
 CVE-2011-1494
@@ -3269,7 +3267,7 @@
 	RESERVED
 CVE-2011-0465 [xrdb code execution via crafted hostname]
 	RESERVED
-	- x11-xserver-utils 7.6+2 (low)
+	- x11-xserver-utils 7.6+2 (low; bug #621423)
 	NOTE: http://cgit.freedesktop.org/xorg/app/xrdb/commit/?id=1027d5df07398c1507fb1fe3a9981aa6b4bc3a56
 	NOTE: low as this is not enabled in a standard setup
 CVE-2011-0464 (Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 ...)