[Secure-testing-commits] r3867 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2006-04-24 09:14:24 +0000 (Mon, 24 Apr 2006)
New Revision: 3867

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-04-24 07:22:07 UTC (rev 3866)
+++ data/CVE/list	2006-04-24 09:14:24 UTC (rev 3867)
@@ -2198,6 +2198,7 @@
 	- busybox <unfixed> (low; bug #360578)
 CVE-2006-1057 [gdm race condition in ICE handling]
 	RESERVED
+	{DSA-1040-1}
 	- gdm 2.14.1-1
 CVE-2006-1056 (The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running ...)
 	- linux-2.6 2.6.16-9
@@ -5068,6 +5069,7 @@
 CVE-2005-4471 (POP3 service in Avaya Modular Messaging Message Storage Server (MSS) ...)
 	NOT-FOR-US: Avaya Modular Messaging Message Storage Server
 CVE-2005-4470 (Heap-based buffer overflow in the get_bhead function in readfile.c in ...)
+	{DSA-1039-1}
 	- blender 2.40-1 (bug #344398; medium)
 	[woody] - blender <no-dsa> (Woody has it in non-free and it is binary-only)
 CVE-2005-4469 (Multiple direct static code injection vulnerabilities in PHPGedView ...)
@@ -8743,6 +8745,7 @@
 	- xli 1.17.0-20 (medium)
 	NOTE: xli couldn't load the provided test images when I checked?
 CVE-2005-3302 (Eval injection vulnerability in bvh_import.py in Blender 2.36 allows ...)
+	{DSA-1039-1}
 	- blender 2.37a-1 (bug #330895; medium)
 	[woody] - blender <not-affected> (Woody's blender does not contain the bvh_import.py script)
 CVE-2005-3177 (CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, ...)