Vulnerable source packages among backports for stable

Note that the list below is based on source packages. This means that packages are not listed here once a new, fixed source version has been uploaded to the archive, even if there are still some vulnerably binary packages present in the archive.

Show only high urgencies
Show only medium and high urgencies
Show issues that may be vulnerable but need to be checked (shown in purple)
Show unimportant issues
Show only remote vulnerabilities

PackageBugUrgencyRemote
bitcoinCVE-2011-4447not yet assigned???
CVE-2012-1909not yet assigned???
cifs-utilsCVE-2012-1586low???
gajimCVE-2012-2093low???
heimdalCVE-2011-4862highyes
icedoveCVE-2011-1187lowyes
CVE-2011-3062medium**yes
CVE-2011-3670medium**yes
CVE-2012-0442high**yes
CVE-2012-0444high**yes
CVE-2012-0445medium**yes
CVE-2012-0446medium**yes
CVE-2012-0447medium**yes
CVE-2012-0449high**yes
CVE-2012-0450low**no
CVE-2012-0451medium**yes
CVE-2012-0455medium**yes
CVE-2012-0456medium**yes
CVE-2012-0457high**yes
CVE-2012-0458medium**yes
CVE-2012-0459high**yes
CVE-2012-0460medium**yes
CVE-2012-0461high**yes
CVE-2012-0462high**yes
CVE-2012-0464high**yes
CVE-2012-0467high**yes
CVE-2012-0469high**yes
CVE-2012-0470high**yes
CVE-2012-0471medium**yes
CVE-2012-0473medium**yes
CVE-2012-0474medium**yes
CVE-2012-0475low**yes
CVE-2012-0477medium**yes
CVE-2012-0478high**yes
CVE-2012-0479medium**yes
libavCVE-2011-3929not yet assigned???
CVE-2011-3936not yet assigned???
CVE-2011-3937not yet assigned???
CVE-2011-3940not yet assigned???
CVE-2011-3945not yet assigned???
CVE-2011-3947not yet assigned???
CVE-2011-3951not yet assigned???
CVE-2011-3952not yet assigned???
CVE-2012-0848not yet assigned???
CVE-2012-0853not yet assigned???
CVE-2012-0858not yet assigned???
CVE-2012-0947not yet assigned???
libgssglueCVE-2011-2709low???
libspring-javaCVE-2011-2894medium**yes
libvirtCVE-2011-4600low???
linux-2.6CVE-2011-1747lowno
CVE-2011-4086low???
CVE-2011-4127not yet assigned???
CVE-2011-4347not yet assigned???
CVE-2011-4604not yet assigned???
CVE-2012-0810not yet assigned???
CVE-2012-1601low???
CVE-2012-2119not yet assigned???
CVE-2012-2121not yet assigned???
CVE-2012-2123not yet assigned???
CVE-2012-2133not yet assigned???
CVE-2012-2313not yet assigned???
CVE-2012-2319low???
muninCVE-2012-2103not yet assigned???
CVE-2012-2104not yet assigned???
CVE-2012-2147not yet assigned???
nagios3CVE-2011-2477low**yes
network-managerCVE-2006-7246not yet assigned???
CVE-2011-2176lowno
CVE-2012-1096not yet assigned???
pastescriptCVE-2012-0878lowyes
redmineCVE-2012-0327medium**yes
CVE-2012-2054medium**yes
ruby-actionpack-2.3CVE-2012-1098medium**yes
CVE-2012-1099medium**yes
rubygemsCVE-2012-2125not yet assigned???
CVE-2012-2126not yet assigned???
sbuildTEMP-0661037-1A43A9not yet assigned???
sympaCVE-2012-2352high???
torCVE-2011-2778high**yes
typo3-srcCVE-2012-2112not yet assigned???
virtualboxCVE-2012-0111low**no
xorgCVE-2011-4613low???
CVE-2012-1093not yet assigned???
TEMP-0000000-269968low???
xorg-serverCVE-2011-4028low???
CVE-2011-4029low???
CVE-2012-0064high???
CVE-2012-2118not yet assigned???

If a "**" is included, the urgency field was automatically assigned by the NVD (National Vulnerability Database). Note that this rating is automatically derived from a set of known factors about the issue (such as access complexity, confidentiality impact, exploitability, remediation level, and others). Human intervention is involved in determining the values of these factors, but the rating itself comes from a fully automated formula.


Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Source (SVN)