[Secure-testing-commits] r7554 - in data: . CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2007-12-07 23:22:02 +0000 (Fri, 07 Dec 2007)
New Revision: 7554

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
iwlwifi kernel issue doesn't affect etch
netkit-ftpd-ssl no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-07 22:26:44 UTC (rev 7553)
+++ data/CVE/list	2007-12-07 23:22:02 UTC (rev 7554)
@@ -34,6 +34,8 @@
 	RESERVED
 CVE-2007-6263 (The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, ...)
 	- linux-ftpd-ssl <unfixed> (low; bug #454733)
+	[sarge] - linux-ftpd-ssl <no-dsa> (Minor issue)
+	[etch] - linux-ftpd-ssl <no-dsa> (Minor issue)
 CVE-2007-6262 (A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before ...)
 	- vlc <not-affected> (Windows only issue)
 CVE-2007-6261 (Integer overflow in the load_threadstack function in the Mach-O loader ...)
@@ -808,6 +810,7 @@
 	- heimdal <not-affected> (vulnerable code not present, ticketfile is just unlinked which is ok)
 CVE-2007-5938 (The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi ...)
 	- linux-2.6 <unfixed>
+	[etch] - linux-2.6 <not-affected> (Vulnerable code not present)
 	NOTE: we ship the iwl code in /debian/patches/features/all/v7-iwlwifi-add-iwlwifi-wireless-drivers.patch
 CVE-2007-5937 (Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive ...)
 	- texlive-bin 2007-13

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2007-12-07 22:26:44 UTC (rev 7553)
+++ data/spu-candidates.txt	2007-12-07 23:22:02 UTC (rev 7554)
@@ -14,6 +14,11 @@
 
 --
 
+linux-ftpd-ssl (CVE-2007-6263)
+#454733
+
+--
+
 slocate (CVE-2007-0227)
 #411937