Author: atomo64-guest Date: 2014-05-13 08:16:39 +0000 (Tue, 13 May 2014) New Revision: 26905
Modified: data/CVE/list Log: foreman itp Modified: data/CVE/list =================================================================== --- data/CVE/list 2014-05-13 05:14:52 UTC (rev 26904) +++ data/CVE/list 2014-05-13 08:16:39 UTC (rev 26905) @@ -27736,7 +27736,7 @@ - libarchive 3.0.4-3 (bug #703957) [squeeze] - libarchive <not-affected> (Vulnerable code not present) CVE-2013-0210 (The smart proxy Puppet run API in Foreman before 1.2.0 allows remote ...) - TODO: check + - foreman <itp> (bug #663101) CVE-2013-0209 (lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x ...) {DSA-2611-1} - movabletype-opensource 5.1.2+dfsg-1 (bug #697666) @@ -27866,15 +27866,15 @@ - ruby-multi-xml <not-affected> (Vulnerable version never in the archive) NOTE: fixed in https://rubygems.org/gems/multi_xml/versions/0.5.2 CVE-2013-0174 (The external node classifier (ENC) API in Foreman before 1.1 allows ...) - TODO: check + - foreman <itp> (bug #663101) CVE-2013-0173 (Foreman before 1.1 uses a salt of "foreman" to hash root passwords, ...) - TODO: check + - foreman <itp> (bug #663101) CVE-2013-0172 (Samba 4.0.x before 4.0.1, in certain Active Directory ...) - samba4 4.0.0~beta2+dfsg1-3.1 (high; bug #699188) - samba <not-affected> (Only affects Active Directory functionality) NOTE: https://lists.samba.org/archive/samba-technical/2013-January/089911.html CVE-2013-0171 (Foreman before 1.1 allows remote attackers to execute arbitrary code ...) - TODO: check + - foreman <itp> (bug #663101) CVE-2013-0170 (Use-after-free vulnerability in the virNetMessageFree function in ...) - libvirt 0.9.12-6 (bug #699224) [squeeze] - libvirt <not-affected> (Vulnerable code not present, see bug #699224) @@ -30579,7 +30579,7 @@ CVE-2012-5478 (The AuthorizationInterceptor in JBoss Enterprise Application Platform ...) - jbossas4 <not-affected> (Only builds a few libraries, not the full application server, #581226) CVE-2012-5477 (The smart proxy in Foreman before 1.1 uses a umask set to 0, which ...) - TODO: check + - foreman <itp> (bug #663101) CVE-2012-5476 RESERVED - horizon <not-affected> (File is installed with 0700 perms in Debian) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits