[Secure-testing-commits] r18969 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-04-16 15:47:58 +0000 (Mon, 16 Apr 2012)
New Revision: 18969

Modified:
   data/CVE/list
Log:
fuse no-dsa
polipo no-dsa
maradns no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-16 15:47:13 UTC (rev 18968)
+++ data/CVE/list	2012-04-16 15:47:58 UTC (rev 18969)
@@ -1499,6 +1499,7 @@
 	[squeeze] - file 5.04-5+squeeze1
 CVE-2012-1570 (The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 ...)
 	- maradns 1.4.12-1 (bug #665012)
+	[squeeze] - maradns <no-dsa> (Minor DNS protocol flaw)
 CVE-2012-1569 (The asn1_get_length_der function in decoding.c in GNU Libtasn1 before ...)
 	{DSA-2440-1}
 	- libtasn1-3 2.12-1 (high)
@@ -9746,6 +9747,7 @@
 CVE-2011-3596
 	RESERVED
 	- polipo <unfixed> (bug #644289)
+	[squeeze] - polipo <no-dsa> (Minor issue)
 	NOTE: http://seclists.org/fulldisclosure/2011/Oct/10
 CVE-2011-3595
 	RESERVED
@@ -18776,13 +18778,16 @@
 	RESERVED
 	- phpbb3 3.0.7-PL1-5 (bug #612477)
 CVE-2011-0543 (Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, ...)
-	- fuse 2.8.5-1 (bug #624551)
+	- fuse 2.8.5-1 (low; bug #624551)
+	[squeeze] - fuse <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-0541
 CVE-2011-0542 (fusermount in fuse 2.8.5 and earlier does not perform a chdir to / ...)
-	- fuse 2.8.5-1 (bug #624551)
+	- fuse 2.8.5-1 (low; bug #624551)
+	[squeeze] - fuse <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-0541
 CVE-2011-0541 (fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot ...)
-	- fuse 2.8.5-1 (bug #624551)
+	- fuse 2.8.5-1 (low; bug #624551)
+	[squeeze] - fuse <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-0541
 CVE-2011-0540
 	RESERVED
@@ -22577,6 +22582,7 @@
 	- linux-2.6 2.6.32-30 (low)
 CVE-2010-3879 (FUSE, possibly 2.8.5 and earlier, allows local users to create mtab ...)
 	- fuse 2.8.5-1 (bug #602333)
+	[squeeze] - fuse <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3879
 CVE-2010-3878 (Cross-site request forgery (CSRF) vulnerability in the JMX Console in ...)
 	- jbossas4 <not-affected> (Only builds a few libraries, not the full application server, #581226)