[Secure-testing-commits] r3462 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-02-12 23:03:24 +0000 (Sun, 12 Feb 2006)
New Revision: 3462

Modified:
   data/CVE/list
Log:
gnutls dos


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-02-12 22:58:32 UTC (rev 3461)
+++ data/CVE/list	2006-02-12 23:03:24 UTC (rev 3462)
@@ -1,3 +1,7 @@
+CVE-2006-XXXX [gnutls/tasn remote DoS]
+	- libtasn1-2 <unfixed> (bug #352182)
+	- libtasn1-0 <unfixed> (bug #352188)
+	- gnutls <unfixed>
 CVE-2006-XXXX [Wordpress XSS]
 	- wordpress 2.0.1-1 (bug #328909)
 CVE-2006-XXXX [pioneers meta-server DoS]
@@ -1036,7 +1040,7 @@
 CVE-2006-0226 (Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) ...)
 	NOT-FOR-US: freebsd kernel
 CVE-2006-0225 (scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands ...)
-	- openssh <unfixed> (low; bug #349645)
+	- openssh <unfixed> (low; bug #349645; bug #352254)
 CVE-2006-0224 (Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 ...)
 	TODO: check
 CVE-2005-4665 (Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier ...)