[Secure-testing-commits] r17003 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-07-26 20:53:45 +0000 (Tue, 26 Jul 2011)
New Revision: 17003

Modified:
   data/CVE/list
Log:
- new kdeutils issue
- new glpi issue (unimportant)
- new busybox issue
- new systemtap issues
- NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-07-26 20:15:30 UTC (rev 17002)
+++ data/CVE/list	2011-07-26 20:53:45 UTC (rev 17003)
@@ -1,3 +1,5 @@
+CVE-2011-XXXX [ark directory traversal]
+	- kdeutils <unfixed> (bug #635541)
 CVE-2011-2883 (The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access ...)
 	NOT-FOR-US: Citrix Access Gateway
 CVE-2011-2882 (Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control ...)
@@ -327,8 +329,10 @@
 	RESERVED
 CVE-2011-2721
 	RESERVED
-CVE-2011-2720
+CVE-2011-2720 [glpi: Insufficient blacklist]
 	RESERVED
+	- glpi <unfixed> (unimportant)
+	NOTE: Only supported behind an authenticated HTTP zone
 CVE-2011-2719 [PMASA-2011-12 phpMyAdmin Possible superglobal and local variables manipulation in swekey authentication.]
 	RESERVED
 	- phpmyadmin 4:3.4.3.2-1 (low)
@@ -340,18 +344,23 @@
 	[lenny] - phpmyadmin <not-affected> (Vulnerable code not present)
 CVE-2011-2717
 	RESERVED
+	NOT-FOR-US: udhcp6c
 CVE-2011-2716
 	RESERVED
+	- busybox <unfixed> (bug #635548)
 CVE-2011-2715
 	RESERVED
+	NOT-FOR-US: Drupal data module
 CVE-2011-2714
 	RESERVED
+	NOT-FOR-US: Drupal data module
 CVE-2011-2713
 	RESERVED
 CVE-2011-2712
 	RESERVED
 CVE-2011-2711
 	RESERVED
+	NOT-FOR-US: cgit
 CVE-2011-2710
 	RESERVED
 CVE-2011-2709
@@ -891,8 +900,10 @@
 	RESERVED
 CVE-2011-2503
 	RESERVED
+	- systemtap <unfixed> (bug #635542)
 CVE-2011-2502
 	RESERVED
+	- systemtap <unfixed> (bug #635542)
 CVE-2011-2501 (The png_format_buffer function in pngerror.c in libpng 1.0.x before ...)
 	- libpng 1.2.44-3 (bug #632786)
 	[lenny] - libpng <no-dsa> (Minor issue)
@@ -1583,7 +1594,7 @@
 CVE-2011-2195
 	RESERVED
 CVE-2011-2193 (Multiple buffer overflows in Terascale Open-Source Resource and Queue ...)
-	- torque 2.4.15+dfsg-1
+	- torque 2.4.15+dfsg-1 (bug #635342)
 CVE-2011-2192 (The Curl_input_negotiate function in http_negotiate.c in libcurl ...)
 	{DSA-2271-1}
 	- curl 7.21.6-2 (high; bug #631615)