> > Also a number in core but I assume those are known: Yes, here are the bugs. We place the CVE id in the bug summary to make for quick searching. > MySQL: logging bypass: > http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0903 Bug #183261 > php: insecure data: > http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1490 Bug #187231 > samba: clear text password exposure: > http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1059 Bug #187170 -- JB