[Secure-testing-commits] r3092 - data/CVE

[Micah Anderson]

Author: micah
Date: 2005-12-18 22:47:53 +0000 (Sun, 18 Dec 2005)
New Revision: 3092

Modified:
   data/CVE/list
Log:
Separated out kernel-patch-vserver and util-vserver issues as the latter will get a CVE assignment
and has a separate bug. Also sarge version added to util-vserver.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-18 21:14:22 UTC (rev 3091)
+++ data/CVE/list	2005-12-18 22:47:53 UTC (rev 3092)
@@ -3542,9 +3542,11 @@
 	- imview <unfixed> (bug #326971; unknown)
 	TODO: Needs further evaluation
 CVE-2005-XXXX [ Chroot escape in vserver kernel patch]
-	- kernel-patch-vserver 2.3 (bug #329087; bug #329090; medium)
-	- util-vserver 0.30.209-1
-	[sarge] - kernel-patch-vserver 1.9.5.4
+	- kernel-patch-vserver 2.3 (bug #329087; medium)
+	[sarge] - kernel-patch-vserver 1.9.5.4 (bug #329087; medium)
+CVE-2005-XXXX [Improper barrier code allows for chroot escape]
+	- util-vserver 0.30.208-1
+	[sarge] - util-vserver 0.30.204-5sarge3 (bug #329090; medium)
 CVE-2005-3753 (Linux kernel before after 2.6.12 and before 2.6.13.1 might allow ...)
 	- linux-2.6 2.6.12-7 (low)
 CVE-2005-3043 (SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows ...)