[Secure-testing-commits] r39689 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-02-15 17:23:01 +0000 (Mon, 15 Feb 2016)
New Revision: 39689

Modified:
   data/CVE/list
Log:
Add CVE-2010-5325/foomatic-filters, possibly cups-filters

Note: this is fixed long time ago, but fixing version needs to be
specified, thus left as undetermined until fixing version in Debian
found.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-15 14:23:25 UTC (rev 39688)
+++ data/CVE/list	2016-02-15 17:23:01 UTC (rev 39689)
@@ -19088,6 +19088,12 @@
 	NOT-FOR-US: Siemens Climatix BACnet/IP communication module
 CVE-2015-4173 (Unquoted Windows search path vulnerability in the autorun value in ...)
 	NOT-FOR-US: Dell SonicWall NetExtender
+CVE-2010-5325 [foomatic-rip unhtmlify() buffer overflow vulnerability]
+	- foomatic-filters <undetermined>
+	- cups-filters <undetermined>
+	NOTE: https://bugs.linuxfoundation.org/show_bug.cgi?id=515
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1218297
+	TODO: check fixing version
 CVE-2010-5324 (Directory traversal vulnerability in UploadServlet in the Remote ...)
 	NOT-FOR-US: Novell ZENworks Configuration Management
 CVE-2015-4692 (The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux ...)