[Secure-testing-commits] r15890 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-01-16 01:23:58 +0000 (Sun, 16 Jan 2011)
New Revision: 15890

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
centerim no-dsa
matrixssl no-dsa
add spu notifications


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-01-16 01:17:11 UTC (rev 15889)
+++ data/CVE/list	2011-01-16 01:23:58 UTC (rev 15890)
@@ -16624,6 +16624,7 @@
 	- cableswig <unfixed> (unimportant; bug #560925)
 	- cadaver <unfixed> (unimportant; bug #560926)
 	- centerim 4.22.10-1 (low)
+	[lenny] - centerim <no-dsa> (Minor issue)
 	- cmake 2.6.0-6 (unimportant; bug #560927)
 	- coin3 <unfixed> (unimportant; bug #560928)
 	- gdcm 2.0.14-2 (low; bug #560929)
@@ -17156,6 +17157,7 @@
 	- openjdk-6 6b18-1.8.2-1
 	- nginx 0.7.64-1
 	- matrixssl 1.8.8-1
+	[lenny] - matrixssl <no-dsa> (Fringe SSL implementation, can be fixed in spu)
 	- tomcat-native 1.1.18-1
 	- gnutls26 <not-affected> (safely handles renegotiation; however support for RFC 5746 would be useful)
 	- xyssl <undetermined>

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2011-01-16 01:17:11 UTC (rev 15889)
+++ data/spu-candidates.txt	2011-01-16 01:23:58 UTC (rev 15890)
@@ -67,6 +67,11 @@
 
 --
 
+centerim
+CVE-2009-3720
+
+--
+
 compiz-fusion-plugins-main (CVE-2008-6514)
 notified maintainer
 
@@ -352,6 +357,12 @@
 
 --
 
+matrixssl
+CVE-2009-3555
+
+
+--
+
 memcached (CVE-2009-1255)
 notified maintainer
 
@@ -435,11 +446,21 @@
 
 --
 
+tangerine (CVE-2010-3381)
+#598302
+
+--
+
 t-prot (CVE-2009-4404)
 notified maintainer
 
 --
 
+texmacs (CVE-2010-3394)
+#598424
+
+--
+
 torcs (CVE-2010-3384)
 #598306