Author: jmm
Date: 2012-05-31 12:24:16 +0000 (Thu, 31 May 2012)
New Revision: 19381
Modified:
data/CVE/list
data/spu-candidates.txt
Log:
feedparser fixed
kernel fixed
one foomatic-filters issue fixed in point update, thanks odyx
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2012-05-30 21:28:40 UTC (rev 19380)
+++ data/CVE/list 2012-05-31 12:24:16 UTC (rev 19381)
@@ -79,7 +79,7 @@
- drupal7 <unfixed> (unimportant)
NOTE: Path disclosure irrelevant for Debian
CVE-2012-2921 (Universal Feed Parser (aka feedparser or python-feedparser)
before ...)
- - feedparser <unfixed> (bug #674167)
+ - feedparser 5.1.2-1 (bug #674167)
CVE-2012-2920 (Cross-site scripting (XSS) vulnerability in the
userphoto_options_page ...)
TODO: check
CVE-2012-2919 (Directory traversal vulnerability in Upload/engine.php in
Chevereto ...)
@@ -1351,7 +1351,7 @@
- php5 <not-affected> (Windows-specific vulnerability)
CVE-2012-2375
RESERVED
- - linux-2.6 <unfixed>
+ - linux-2.6 3.2.19-1
CVE-2012-2374 (CRLF injection vulnerability in the ...)
- python-tornado 2.1.0-3 (low; bug #673987)
[squeeze] - python-tornado <not-affected> (Vulnerable code not present)
@@ -1564,7 +1564,7 @@
NOT-FOR-US: The anaconda installer
CVE-2012-2313 [more tight ioctl permissions in dl2k driver]
RESERVED
- - linux-2.6 <unfixed>
+ - linux-2.6 3.2.19-1
CVE-2012-2312
RESERVED
- jbossas4 <not-affected> (Only affects JBoss 7)
@@ -13721,8 +13721,7 @@
CVE-2011-2924
RESERVED
- foomatic-filters 4.0.12-1 (low)
- [squeeze] - foomatic-filters <no-dsa> (Minor issue)
- NOTE: http://bugs.linux-foundation.org/show_bug.cgi?id=936
+ [squeeze] - foomatic-filters 4.0.5-6+squeeze2
CVE-2011-2923
RESERVED
- foomatic-filters <unfixed> (unimportant)
Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt 2012-05-30 21:28:40 UTC (rev 19380)
+++ data/spu-candidates.txt 2012-05-31 12:24:16 UTC (rev 19381)
@@ -148,11 +148,6 @@
--
-foomatic-filters (CVE-2011-2923, -2011-2924)
-http://bugs.linux-foundation.org/show_bug.cgi?id=936
-
--
-
foo2zjs (CVE-2011-2684)
maintainer notified in initial bug report
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
