[Secure-testing-commits] r5133 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-12-17 15:12:09 +0100 (Sun, 17 Dec 2006)
New Revision: 5133

Modified:
   data/CVE/list
   data/DSA/list
Log:
kernel DSA
two kernel issues already fixed
please process TODOs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-16 08:14:25 UTC (rev 5132)
+++ data/CVE/list	2006-12-17 14:12:09 UTC (rev 5133)
@@ -1480,7 +1480,7 @@
 	RESERVED
 CVE-2006-5871 (smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before ...)
 	{DSA-1233}
-	TODO: check
+	- linux-2.6 <not-affected> (Current Linux versions already implement intended behaviour)
 CVE-2006-5870
 	RESERVED
 CVE-2006-5869 (pstotext before 1.9 allows user-assisted attackers to execute ...)
@@ -3748,8 +3748,9 @@
 	NOT-FOR-US: HP-UX
 CVE-2006-4819 (Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote ...)
 	NOT-FOR-US: Opera
-CVE-2006-4818
+CVE-2006-4818 [mincore DoS]
 	RESERVED
+	TODO: Check, when this was fixed in linux-2.6
 CVE-2006-4817
 	RESERVED
 CVE-2006-4816

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2006-12-16 08:14:25 UTC (rev 5132)
+++ data/DSA/list	2006-12-17 14:12:09 UTC (rev 5133)
@@ -1,3 +1,6 @@
+[17 Dec 2006] DSA-1237 kernel-source-2.4.27 - several
+        {CVE-2006-4093 CVE-2006-4538 CVE-2006-4997 CVE-2006-5174 CVE-2006-5649 CVE-2006-5871}
+        [sarge] - kernel-source-2.6.8 2.6.8-16sarge6
 [13 Dec 2006] DSA-1236-1 enemies-of-carlotta
 	{CVE-2006-5875}
 	[sarge] - enemies-of-carlotta 1.0.3-1sarge1
@@ -7,7 +10,7 @@
 [13 Dec 2006] DSA-1234-1 ruby1.6
 	{CVE-2006-5467}
 	[sarge] - ruby1.6 1.6.8-12sarge3
-[10 Jul 2006] DSA-1233 kernel-source-2.6.8 - race condition
+[10 Dec 2006] DSA-1233 kernel-source-2.6.8 - several
         {CVE-2006-3741 CVE-2006-4538 CVE-2006-4813 CVE-2006-4997 CVE-2006-5174 CVE-2006-5619 CVE-2006-5649 CVE-2006-5751 CVE-2006-5871}
         [sarge] - kernel-source-2.6.8 2.6.8-16sarge6
 [09 Dec 2006] DSA-1232-1 clamav