[Secure-testing-commits] r16104 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2011-02-11 04:04:35 +0000 (Fri, 11 Feb 2011)
New Revision: 16104

Modified:
   data/CVE/list
Log:
add cgiirc entry
new evince, pidgin, php-gettext, and stunnel issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-11 02:09:39 UTC (rev 16103)
+++ data/CVE/list	2011-02-11 04:04:35 UTC (rev 16104)
@@ -1,3 +1,16 @@
+CVE-2011-XXXX [evince segfault]
+	- evince <unfixed> (bug #612668)
+	TODO: check
+CVE-2011-XXXX [php-gettext XSS]
+	- php-gettext <unfixed> (unimportant)
+	NOTE: http://secunia.com/advisories/43228/ they are only examples
+CVE-2011-XXXX [libpurple info leak]
+	- pidgin <unfixed>
+	NOTE: http://www.pidgin.im/news/security/?id=50
+CVE-2011-XXXX [stunnel fd leak]
+	- stunnel4 <unfixed>
+	NOTE: http://www.stunnel.org/?page=sdf_ChangeLog (v4.35)
+	TODO: check
 CVE-2011-XXXX [wordpress multiple issues]
 	- wordpress <unfixed>
 	NOTE: http://codex.wordpress.org/Version_3.0.5
@@ -1951,6 +1964,7 @@
 CVE-2011-0050
 	RESERVED
 	{DSA-2158-1}
+	- cgiirc <unfixed> (bug #612671)
 CVE-2011-0049 (Directory traversal vulnerability in the _list_file_get function in ...)
 	TODO: check
 CVE-2011-0048 (Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and ...)