[Secure-testing-commits] r7507 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-12-05 00:49:02 +0000 (Wed, 05 Dec 2007)
New Revision: 7507

Modified:
   data/CVE/list
Log:
CVE-2007-5501, CVE-2007-5500 fixed in linux-2.6 2.6.23-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-04 23:31:24 UTC (rev 7506)
+++ data/CVE/list	2007-12-05 00:49:02 UTC (rev 7507)
@@ -2284,11 +2284,11 @@
 CVE-2007-5502 (The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does ...)
 	NOT-FOR-US: OpenSSL Fips object module
 CVE-2007-5501 (The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux ...)
-	- linux-2.6 <unfixed> (high)
+	- linux-2.6 2.6.23-1 (high)
 	[etch] - linux-2.6 <not-affected> (Vulnerable code was introduced in 2.6.21)
 	NOTE: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=96a2d41a3e495734b63bff4e5dd0112741b93b38
 CVE-2007-5500 (The wait_task_stopped function in the Linux kernel before 2.6.23.8 ...)
-	- linux-2.6 <unfixed>
+	- linux-2.6 2.6.23-1
 	NOTE: kernel-sec is already tracking this
 CVE-2007-5499
 	REJECTED