[Secure-testing-commits] r16105 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-02-11 07:52:30 +0000 (Fri, 11 Feb 2011)
New Revision: 16105

Modified:
   data/CVE/list
Log:
openssl fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-11 04:04:35 UTC (rev 16104)
+++ data/CVE/list	2011-02-11 07:52:30 UTC (rev 16105)
@@ -30,15 +30,15 @@
 	[squeeze] - aptitude <no-dsa> (Minor issue)
 	[lenny] - aptitude <no-dsa> (Minor issue)
 CVE-2011-0775 (pivotx/modules/module_image.php in PivotX 2.2.2 allows remote ...)
-	TODO: check
+	NOT-FOR-US: PivotX
 CVE-2011-0774 (PivotX 2.2.2 allows remote attackers to obtain sensitive information ...)
-	TODO: check
+	NOT-FOR-US: PivotX
 CVE-2011-0773 (Cross-site scripting (XSS) vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: PivotX
 CVE-2011-0772 (Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, ...)
-	TODO: check
+	NOT-FOR-US: PivotX
 CVE-2011-0771 (Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not ...)
-	TODO: check
+	NOT-FOR-US: Janrain Engage Drupal module
 CVE-2011-0770
 	RESERVED
 CVE-2011-0769
@@ -138,7 +138,7 @@
 CVE-2011-0740 (Cross-site scripting (XSS) vulnerability in ...)
 	- magpierss <unfixed> (bug #611940)
 CVE-2011-0739 (The deliver function in the sendmail delivery agent ...)
-	TODO: check
+	NOT-FOR-US: Ruby mail gem
 CVE-2011-0738 (MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through ...)
 	NOT-FOR-US: MyProxy
 CVE-2011-0737 (Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to ...)
@@ -357,7 +357,7 @@
 CVE-2010-4709 (Heap-based buffer overflow in Automated Solutions Modbus/TCP Master ...)
 	NOT-FOR-US: Automated Solutions Modbus/TCP Master
 CVE-2011-0649 (Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through ...)
-	TODO: check
+	NOT-FOR-US: TIBCO Rendezvous
 CVE-2011-0648
 	RESERVED
 CVE-2011-0647
@@ -2321,7 +2321,7 @@
 	- tor 0.2.1.29-1
 CVE-2011-0014 [http://www.openssl.org/news/secadv_20110208.txt]
 	RESERVED
-	- openssl <unfixed> (low)
+	- openssl 0.9.8o-5 (low)
 	[lenny] - openssl <not-affected> (Only 0.9.8h through 0.9.8q are affected)
 CVE-2011-0013 [tomcat HTML manager XSS]
 	RESERVED