Author: jmm
Date: 2011-03-03 08:39:57 +0000 (Thu, 03 Mar 2011)
New Revision: 16292
Modified:
data/CVE/list
data/spu-candidates.txt
Log:
CVE assignments
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2011-03-03 07:24:22 UTC (rev 16291)
+++ data/CVE/list 2011-03-03 08:39:57 UTC (rev 16292)
@@ -404,22 +404,31 @@
NOT-FOR-US: WebSCADA
CVE-2008-7274 (IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS
Login ...)
NOT-FOR-US: IBM WebSphere Application Server
-CVE-2010-XXXX [kfreebsd dos]
+CVE-2011-1132 [kfreebsd dos]
- kfreebsd-8 <unfixed> (low; bug #613312; bug #611476)
[squeeze] - kfreebsd-8 <no-dsa> (Can be fixed through a point update)
[lenny] - kfreebsd-8 <no-dsa> (Not-supported in Lenny)
- kfreebsd-7 <unfixed> (bug #613312)
[lenny] - kfreebsd-7 <no-dsa> (Not supported in Lenny)
- NOTE: CVE ID requested
-CVE-2010-XXXX [xinha multiple vulns]
+CVE-2011-1133 [xinha XSS mode param]
- serendipity <unfixed> (bug #611661)
[lenny] - serendipity <not-affected> (Xinha not yet included)
- openacs <unfixed>
- dotlrn <unfixed>
- TODO: check & request ids
NOTE: http://secunia.com/advisories/40669/
- NOTE: CVE ID requested
-CVE-2011-XXXX [proftpd mod_sftp DoS]
+CVE-2011-1134 [xinha XSS image manager]
+ - serendipity <unfixed> (bug #611661)
+ [lenny] - serendipity <not-affected> (Xinha not yet included)
+ - openacs <unfixed>
+ - dotlrn <unfixed>
+ NOTE: http://secunia.com/advisories/40669/
+CVE-2011-1135 [xinha multiple vulns]
+ - serendipity <unfixed> (bug #611661)
+ [lenny] - serendipity <not-affected> (Xinha not yet included)
+ - openacs <unfixed>
+ - dotlrn <unfixed>
+ NOTE: http://secunia.com/advisories/40669/
+CVE-2011-1137 [proftpd mod_sftp DoS]
- proftpd-dfsg <unfixed>
NOTE: http://bugs.proftpd.org/show_bug.cgi?id=3586
NOTE: http://www.exploit-db.com/exploits/16129/
@@ -914,11 +923,10 @@
CVE-2011-XXXX [wordpress multiple issues]
- wordpress 3.0.5+dfsg-1
NOTE: http://codex.wordpress.org/Version_3.0.5
-CVE-2011-XXXX [tesseract tempfile]
+CVE-2011-1136 [tesseract tempfile]
- tesseract 2.04-2.1 (low; bug #612032)
[squeeze] - tesseract <no-dsa> (Minor issue)
[lenny] - tesseract <no-dsa> (Minor issue)
- NOTE: CVE ID requested
CVE-2011-XXXX [conky tempfile]
- conky <unfixed> (low; bug #612033)
[squeeze] - conky <no-dsa> (Minor issue)
Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt 2011-03-03 07:24:22 UTC (rev 16291)
+++ data/spu-candidates.txt 2011-03-03 08:39:57 UTC (rev 16292)
@@ -41,7 +41,7 @@
--
-tesseract (CVE-2011-XXXX)
+tesseract (CVE-2011-1136)
#612032
awaiting maintainer response
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
