[Secure-testing-commits] r4271 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2006-06-21 21:05:51 +0000 (Wed, 21 Jun 2006)
New Revision: 4271

Modified:
   data/CVE/list
Log:
linux kernel fixes

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-06-21 16:37:38 UTC (rev 4270)
+++ data/CVE/list	2006-06-21 21:05:51 UTC (rev 4271)
@@ -1,5 +1,7 @@
 CVE-2006-3100 [termnetd buffer overflow]
 	- termnetd 3.3-7 (bug #358028; medium)
+CVE-2006-3085 [linux endless loop in xt_sctp]
+	- linux-2.6 2.6.16-15
 CVE-2006-XXXX [webalizer-stonesteps XSS]
 	- webalizer-stonesteps 2.4.1.2-1
 CVE-2006-3080 (Cross-site scripting (XSS) vulnerability in viewposts.cfm in ...)
@@ -1448,15 +1450,17 @@
 	RESERVED
 CVE-2006-2449 (KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users ...)
 	- kdebase 4:3.5.2-2 (bug #374002; medium)
-CVE-2006-2448
+CVE-2006-2448 [linux machine check problem on powerpc]
 	RESERVED
+	- linux-2.6 2.6.16-15
 CVE-2006-2447 (SpamAssassin before 3.1.3, when running with vpopmail and the paranoid ...)
 	{DSA-1090-1}
 	- spamassassin 3.1.3-1 (medium)
 CVE-2006-2446
 	RESERVED
-CVE-2006-2445
+CVE-2006-2445 [linux vuln in check_process_timers (DoS?)]
 	RESERVED
+	- linux-2.6 2.6.16-15
 CVE-2006-2444 (The snmp_trap_decode function in the SNMP NAT helper for Linux kernel ...)
 	- linux-2.6 2.6.16-15
 CVE-2006-2442 (kphone 4.2 creates .qt/kphonerc with world-readable permissions, which ...)
@@ -4180,7 +4184,7 @@
 	NOT-FOR-US: VeriSign haydn.exe
 CVE-2006-1343 (net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, ...)
 	{DSA-1097-1}
-	- linux-2.6 <unfixed>
+	- linux-2.6 2.6.16-15
 CVE-2006-1342 (net/ipv4/af_inet.c in Linux kernel 2.4 does not clear ...)
 	- linux-2.6 <unfixed>
 	NOTE: Possibly not-affected, needs further checking