[Secure-testing-commits] r17292 - in data: . CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-09-26 07:33:42 +0000 (Mon, 26 Sep 2011)
New Revision: 17292

Modified:
   data/CVE/list
   data/DSA/list
   data/next-oldstable-point-update.txt
   data/next-point-update.txt
Log:
- add missing CVE ID for lenny kernel DSA
- record spu/ospu fixes for v86d
- fcgi-perl fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-09-25 21:13:05 UTC (rev 17291)
+++ data/CVE/list	2011-09-26 07:33:42 UTC (rev 17292)
@@ -2192,7 +2192,7 @@
 CVE-2011-2767
 	RESERVED
 CVE-2011-2766 (The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by ...)
-	- libfcgi-perl <unfixed> (bug #607479)
+	- libfcgi-perl 0.73-2 (bug #607479)
 	[lenny] - libfcgi-perl <not-affected> (Introduced in 0.70)
 CVE-2011-2765 [pyro: insecure use of temporary pid file]
 	RESERVED
@@ -3658,13 +3658,16 @@
 	RESERVED
 	{DSA-2310-1}
 	- linux-2.6 2.6.32-1
+	NOTE: Support for Alpha was dropped with Squeeze, so marking 2.6.32 as fixed
 CVE-2011-2210 [Alpha-specific issue]
 	RESERVED
 	- linux-2.6 2.6.32-1
+	NOTE: Support for Alpha was dropped with Squeeze, so marking 2.6.32 as fixed
 CVE-2011-2211 [Alpha-specific issue]
 	RESERVED
 	{DSA-2310-1}
 	- linux-2.6 2.6.32-1
+	NOTE: Support for Alpha was dropped with Squeeze, so marking 2.6.32 as fixed
 CVE-2011-2203 [HFS DoS]
 	RESERVED
 	- linux-2.6 <unfixed>

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2011-09-25 21:13:05 UTC (rev 17291)
+++ data/DSA/list	2011-09-26 07:33:42 UTC (rev 17292)
@@ -1,5 +1,5 @@
 [22 Sep 2011] DSA-2310-1 linux-2.6 - several issues
-	{CVE-2009-4067 CVE-2011-0712 CVE-2011-1020 CVE-2011-2209 CVE-2011-2211 CVE-2011-2213 CVE-2011-2484 CVE-2011-2491 CVE-2011-2492 CVE-2011-2495 CVE-2011-2496 CVE-2011-2497 CVE-2011-2525 CVE-2011-2928 CVE-2011-3188 CVE-2011-3191}
+	{CVE-2009-4067 CVE-2011-0712 CVE-2011-1020 CVE-2011-2208 CVE-2011-2209 CVE-2011-2211 CVE-2011-2213 CVE-2011-2484 CVE-2011-2491 CVE-2011-2492 CVE-2011-2495 CVE-2011-2496 CVE-2011-2497 CVE-2011-2525 CVE-2011-2928 CVE-2011-3188 CVE-2011-3191}
 	[lenny] - linux-2.6 2.6.26-26lenny4
 [13 Sep 2011] DSA-2309-1 openssl - compromised certificate authority
 	{CVE-2011-1945}

Modified: data/next-oldstable-point-update.txt
===================================================================
--- data/next-oldstable-point-update.txt	2011-09-25 21:13:05 UTC (rev 17291)
+++ data/next-oldstable-point-update.txt	2011-09-26 07:33:42 UTC (rev 17292)
@@ -54,4 +54,8 @@
 	[lenny] - aptitude 0.4.11.11-1~lenny2 (bug #612034)
 CVE-2011-XXXX
 	[lenny] - atop 1.23-1+lenny1 (bug #622794)
+CVE-2011-1070
+	RESERVED
+	[lenny] - v86d 0.1.5.2-1+lenny1
 
+

Modified: data/next-point-update.txt
===================================================================
--- data/next-point-update.txt	2011-09-25 21:13:05 UTC (rev 17291)
+++ data/next-point-update.txt	2011-09-26 07:33:42 UTC (rev 17292)
@@ -24,3 +24,6 @@
 	[squeeze] - atop 1.23-1+squeeze1 (bug #622794)
 CVE-2011-3354
 	[squeeze] - quassel 0.6.3-2+squeeze1 (bug #640960)
+CVE-2011-1070
+	RESERVED
+	[squeeze] - v86d 0.1.9-1+squeeze1