[Secure-testing-commits] r4629 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2006-08-25 16:38:29 +0000 (Fri, 25 Aug 2006)
New Revision: 4629

Modified:
   data/CVE/list
Log:
- CVE-2006-4093, CVE-2006-4145, CVE-2006-3745: new linux issues fixed
- new zope issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-08-24 21:14:51 UTC (rev 4628)
+++ data/CVE/list	2006-08-25 16:38:29 UTC (rev 4629)
@@ -1,3 +1,6 @@
+CVE-2006-XXXX [zope Arbitrary file inclusion]
+	TODO: check zope zope-2.7 zope2.8 zope2.9 zope3
+	- zope2.8 2.8.8-2
 CVE-2006-4329 (Multiple PHP remote file inclusion vulnerabilities in Shadows Rising ...)
 	TODO: check
 CVE-2006-4328 (SQL injection vulnerability in admin.php in CloudNine Interactive ...)
@@ -389,7 +392,8 @@
 CVE-2006-4146
 	RESERVED
 CVE-2006-4145 (The Universal Disk Format (UDF) filesystem driver in Linux kernel ...)
-	TODO: check
+	- linux-2.6 2.6.17-7
+	- linux-2.6.16 <unfixed>
 CVE-2006-4143 (Netgear FVG318 running firmware 1.0.40 allows remote attackers to ...)
 	NOT-FOR-US: Netgear
 CVE-2006-4142 (SQL injection vulnerability in extra/online.php in Virtual War (VWar) ...)
@@ -491,7 +495,8 @@
 CVE-2006-4094
 	RESERVED
 CVE-2006-4093 (Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on ...)
-	TODO: check
+	- linux-2.6 2.6.17-7
+	- linux-2.6.16 <unfixed>
 CVE-2006-4092 (Simpliciti Locked Browser does not properly limit a user's actions to ...)
 	NOT-FOR-US: Simpliciti Locked Browser
 CVE-2006-4091 (Multiple cross-site scripting (XSS) vulnerabilities in Archangel ...)
@@ -1315,7 +1320,8 @@
 	- gnupg 1.4.5-1 (medium)
 	- gnupg2 1.9.20-2 (medium)
 CVE-2006-3745 (Unspecified vulnerability in the SCTP implementation in Linux 2.6.9, ...)
-	TODO: check
+	- linux-2.6 2.6.17-7
+	- linux-2.6.16 <unfixed>
 CVE-2006-3744
 	RESERVED
 CVE-2006-3743