[Secure-testing-commits] r16773 - data/CVE

[Paul Wise]

Author: pabs
Date: 2011-06-05 14:06:12 +0000 (Sun, 05 Jun 2011)
New Revision: 16773

Modified:
   data/CVE/list
Log:
more pam issues fixed in the same upload

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-06-05 14:03:17 UTC (rev 16772)
+++ data/CVE/list	2011-06-05 14:06:12 UTC (rev 16773)
@@ -8315,7 +8315,7 @@
 CVE-2010-3854 (Multiple cross-site scripting (XSS) vulnerabilities in the web ...)
 	- couchdb <unfixed>
 CVE-2010-3853 (pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) ...)
-	- pam <unfixed> (low; bug #608273)
+	- pam 1.1.3-1 (low; bug #608273)
 CVE-2010-3852 (The default configuration of Luci 0.22.4 and earlier in Red Hat Conga ...)
 	NOT-FOR-US: Red Hat Conga
 CVE-2010-3851 (libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 ...)
@@ -9554,10 +9554,10 @@
 	{DSA-2126-1}
 	- linux-2.6 2.6.32-24
 CVE-2010-3431 (The privilege-dropping implementation in the (1) pam_env and (2) ...)
-	- pam <unfixed> (bug #599832)
+	- pam 1.1.3-1 (bug #599832)
 	NOTE: 20100924164823.GA21584 at openwall.com
 CVE-2010-3430 (The privilege-dropping implementation in the (1) pam_env and (2) ...)
-	- pam <unfixed> (bug #599832)
+	- pam 1.1.3-1 (bug #599832)
 	[squeeze] - pam <not-affected> (Affected functionality introduced in 1.1.2, see #599832)
 	[lenny] - pam <not-affected> (Affected functionality introduced in 1.1.2, see #599832)
 	NOTE: 20100924164823.GA21584 at openwall.com