[Secure-testing-commits] r3297 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-01-15 12:03:20 +0000 (Sun, 15 Jan 2006)
New Revision: 3297

Modified:
   data/CVE/list
Log:
new kernel issue
add tetex as not-affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-14 17:00:45 UTC (rev 3296)
+++ data/CVE/list	2006-01-15 12:03:20 UTC (rev 3297)
@@ -2826,6 +2826,7 @@
 CVE-2005-3627 (Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, ...)
 	{DSA-940-1 DSA-938-1 DSA-937-1 DSA-936-1 DSA-932-1 DSA-931-1}
 	- poppler 0.4.4-1 (bug #346076)
+	- tetex <not-affected> (Links dynamically to poppler)
 	- kdegraphics 3.5.0-3
 	- gpdf <unfixed>
 	- xpdf 3.01-4
@@ -2842,6 +2843,7 @@
 CVE-2005-3625 (Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, ...)
 	{DSA-940-1 DSA-938-1 DSA-937-1 DSA-936-1 DSA-932-1 DSA-931-1}
 	- poppler 0.4.4-1 (bug #346076)
+	- tetex <not-affected> (Links dynamically to poppler)
 	- kdegraphics 3.5.0-3
 	- xpdf 3.01-4
 	- gpdf <unfixed>
@@ -2850,6 +2852,7 @@
 CVE-2005-3624 (The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, ...)
 	{DSA-940-1 DSA-938-1 DSA-937-1 DSA-936-1 DSA-932-1 DSA-931-1}
 	- poppler 0.4.4-1 (bug #346076)
+	- tetex <not-affected> (Links dynamically to poppler)
 	- gpdf <unfixed>
 	- kdegraphics 3.5.0-3
 	- xpdf 3.01-4
@@ -3736,8 +3739,9 @@
 	TODO: check 2.4
 CVE-2005-3357 (mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost ...)
 	TODO: check
-CVE-2005-3356
+CVE-2005-3356 [kernel DoS, see patch-tracking for details]
 	RESERVED
+	- linux-2.6 <unfixed>
 CVE-2005-3355 (Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has ...)
 	{DSA-901-1}
 	- gnump3d 2.9.8-1