[Secure-testing-commits] r16244 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2011-02-24 03:53:24 +0000 (Thu, 24 Feb 2011)
New Revision: 16244

Modified:
   data/CVE/list
Log:
aptdaemon and gitolite issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-23 21:41:51 UTC (rev 16243)
+++ data/CVE/list	2011-02-24 03:53:24 UTC (rev 16244)
@@ -1,3 +1,8 @@
+CVE-2011-XXXX [ADC path traversal]
+	- gitolite <unfixed>
+	TODO: check
+	NOTE: https://github.com/sitaramc/gitolite/commit/a33f0f85047834212ff4baf5b479c6cf3d2a6075
+	NOTE: https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc
 CVE-2011-1058
 	RESERVED
 CVE-2011-1057 (The installer for Metasploit Framework 3.5.1, when running on Windows, ...)
@@ -867,6 +872,9 @@
 	RESERVED
 CVE-2011-0725
 	RESERVED
+	- aptdaemon <unfixed>
+	TODO: check
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/aptdaemon/+bug/722228
 CVE-2011-0724 (The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not ...)
 	- italc <not-affected> (Only Edubuntu Live DVD affected)
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/italc/+bug/714864
@@ -5572,6 +5580,7 @@
 CVE-2010-XXXX [piwigo]
 	- piwigo 2.1.2-2
 	NOTE: http://www.exploit-db.com/exploits/14973/
+	NOTE: CVE id requested
 CVE-2010-3608 (Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote ...)
 	NOT-FOR-US: wpQuiz
 CVE-2010-3607 (Cross-site scripting (XSS) vulnerability in AGENTS/index.php in NetArt ...)