[Secure-testing-commits] r6263 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-08-08 14:28:31 +0000 (Wed, 08 Aug 2007)
New Revision: 6263

Modified:
   data/CVE/list
Log:
* Add bug reports for the minor openssh issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-08 09:14:08 UTC (rev 6262)
+++ data/CVE/list	2007-08-08 14:28:31 UTC (rev 6263)
@@ -3115,7 +3115,7 @@
 CVE-2007-2769 (BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly ...)
 	NOT-FOR-US: OPeNDAP
 CVE-2007-2768 (OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, ...)
-	- openssh <unfixed> (low)
+	- openssh <unfixed> (bug #436571; low)
 	[etch] - openssh <no-dsa> (Minor issue)
 	[sarge] - openssh <no-dsa> (Minor issue)
 CVE-2007-2767 (Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) ...)
@@ -4312,7 +4312,7 @@
 CVE-2007-2244 (Multiple buffer overflows in Adobe Photoshop CS2 and CS3 allow ...)
 	NOT-FOR-US: Adobe Photoshop
 CVE-2007-2243 (OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is ...)
-	- openssh <unfixed> (low)
+	- openssh <unfixed> (bug #436571; low)
 	[etch] - openssh <no-dsa> (Minor issue)
 	[sarge] - openssh <no-dsa> (Minor issue)
 CVE-2007-2242 (The IPv6 protocol allows remote attackers to cause a denial of service ...)