[Secure-testing-commits] r16184 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2011-02-17 05:04:24 +0000 (Thu, 17 Feb 2011)
New Revision: 16184

Modified:
   data/CVE/list
Log:
2 php5 issues, NFU


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-16 23:12:30 UTC (rev 16183)
+++ data/CVE/list	2011-02-17 05:04:24 UTC (rev 16184)
@@ -837,8 +837,9 @@
 CVE-2011-0709
 	RESERVED
 	- linux-2.6 <not-affected> (Introduced in 2.6.35-rc1 and fixed in 2.6.35-rc5)
-CVE-2011-0708
+CVE-2011-0708 [exif data processing DoS (limited abitrary memory access)]
 	RESERVED
+	- php5 <unfixed>
 CVE-2011-0707 [unspecified XSS vulnerability]
 	RESERVED
 	- mailman <unfixed>
@@ -1575,8 +1576,10 @@
 	RESERVED
 	- php5 <unfixed>
 	NOTE: http://svn.php.net/viewvc?view=revision&revision=307867
-CVE-2011-0420
+CVE-2011-0420 [grapheme_extract null pointer deref]
 	RESERVED
+	- php5 <unfixed>
+	NOTE: http://svn.php.net/viewvc?view=revision&revision=306449
 CVE-2011-0419
 	RESERVED
 CVE-2011-0418
@@ -3492,6 +3495,7 @@
 	- phpmyadmin 4:3.3.7-2
 CVE-2010-4328
 	RESERVED
+	NOT-FOR-US: Novell iPrint LPD
 CVE-2010-4327 (Unspecified vulnerability in the NCP service in Novell eDirectory ...)
 	TODO: check
 CVE-2010-4326 (Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent ...)