[Secure-testing-commits] r5139 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2006-12-17 21:14:20 +0100 (Sun, 17 Dec 2006)
New Revision: 5139

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-17 17:46:03 UTC (rev 5138)
+++ data/CVE/list	2006-12-17 20:14:20 UTC (rev 5139)
@@ -191,6 +191,7 @@
 CVE-2006-6482 (Adobe ColdFusion MX7 allows remote attackers to obtain sensitive ...)
 	NOT-FOR-US: ColdFusion
 CVE-2006-6481 (Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a ...)
+	{DSA-1238-1}
 	- clamav 0.88.7-1 (low)
 CVE-2006-6480 (admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows ...)
 	NOT-FOR-US: AnnonceScriptHP
@@ -341,6 +342,7 @@
 CVE-2006-6407 (F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote ...)
 	NOT-FOR-US: F-Prot
 CVE-2006-6406 (Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus ...)
+	{DSA-1238-1}
 	- clamav 0.88.7-1 (medium)
 CVE-2006-6405 (BitDefender Mail Protection for SMB 2.0 allows remote attackers to ...)
 	NOT-FOR-US: BitDefender
@@ -1486,8 +1488,9 @@
 	NOTE: http://secunia.com/advisories/23230/
 CVE-2006-5872
 	RESERVED
+	{DSA-1239-1}
 CVE-2006-5871 (smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before ...)
-	{DSA-1233}
+	{DSA-1237 DSA-1233}
 	- linux-2.6 <not-affected> (Current Linux versions already implement intended behaviour)
 CVE-2006-5870
 	RESERVED
@@ -1964,7 +1967,7 @@
 CVE-2006-5650 (The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ ...)
 	NOT-FOR-US: ICQPhone.SipxPhoneManager
 CVE-2006-5649 (Unspecified vulnerability in the &quot;alignment check exception handling&quot; ...)
-	{DSA-1233}
+	{DSA-1237 DSA-1233}
 	- linux-2.6 2.6.18-4
 CVE-2006-5648 (Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a ...)
 	TODO: check
@@ -3001,7 +3004,7 @@
 CVE-2006-5175 (Cross-site request forgery (CSRF) vulnerability in the administrative ...)
 	NOT-FOR-US: TeraStation HD-HTGL
 CVE-2006-5174 (The copy_from_user function in the uaccess code in Linux kernel 2.6 ...)
-	{DSA-1233}
+	{DSA-1237 DSA-1233}
 	- linux-2.6 2.6.18-5
 	NOTE: s390 only, fix in 2.6.18-3 was reverted in 2.6.18-4
 CVE-2006-5173 (Linux kernel does not properly save or restore EFLAGS during a context ...)
@@ -3375,7 +3378,7 @@
 CVE-2006-4998
 	RESERVED
 CVE-2006-4997 (The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux ...)
-	{DSA-1233}
+	{DSA-1237 DSA-1233}
 	- linux-2.6 2.6.18-1
 CVE-2006-4996 (Unspecified vulnerability in JoomlaLib (com_joomlalib) before 1.2.2 ...)
 	NOT-FOR-US: JoomlaLib (com_joomlalib) for Joomla!
@@ -3959,6 +3962,7 @@
 CVE-2000-1241 (Unspecified vulnerability in Haakon Nilsen simple, integrated ...)
 	NOT-FOR-US: Data pre-dating the Security Tracker
 CVE-2006-4731 (Multiple directory traversal vulnerabilities in (1) login.pl and (2) ...)
+	{DSA-1239-1}
 	- sql-ledger 2.6.19-1
 CVE-2006-4730
 	RESERVED
@@ -4407,7 +4411,7 @@
 CVE-2006-4539 ((1) includes/widgets/module_company_tickets.php and (2) ...)
 	NOT-FOR-US: Cerberus Helpdesk
 CVE-2006-4538 (Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC ...)
-	{DSA-1233}
+	{DSA-1237 DSA-1233}
 	- linux-2.6 2.6.17-9
 CVE-2006-4537 (NET$SESSION_CONTROL.EXE before 20060825 in DECnet-Plus in OpenVMS ...)
 	NOT-FOR-US: OpenVMS
@@ -5100,6 +5104,7 @@
 CVE-2006-4245
 	RESERVED
 CVE-2006-4244 (SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that ...)
+	{DSA-1239-1}
 	- sql-ledger 2.6.18-1 (medium; bug #386519)
 CVE-2006-4243 [linux vserver priviledge escalation in remount code]
 	RESERVED
@@ -5435,6 +5440,7 @@
 CVE-2006-4094
 	RESERVED
 CVE-2006-4093 (Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on ...)
+	{DSA-1237}
 	- linux-2.6 2.6.17-7
 CVE-2006-4092 (Simpliciti Locked Browser does not properly limit a user's actions to ...)
 	NOT-FOR-US: Simpliciti Locked Browser