[Secure-testing-commits] r7641 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-12-17 17:52:44 +0000 (Mon, 17 Dec 2007)
New Revision: 7641

Modified:
   data/CVE/list
Log:
CVE-2007-4849, CVE-2007-3843 fixed in linux-2.6 2.6.23-1
CVE-2007-4308 fixed in linux-2.6 2.6.22-4


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-17 17:49:38 UTC (rev 7640)
+++ data/CVE/list	2007-12-17 17:52:44 UTC (rev 7641)
@@ -4469,7 +4469,7 @@
 	RESERVED
 CVE-2007-4849 (JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly ...)
 	{DSA-1378-2 DSA-1378-1}
-	- linux-2.6 <unfixed> (bug #442245; low)
+	- linux-2.6 2.6.23-1 (bug #442245; low)
 CVE-2007-4848 (Microsoft Internet Explorer 4.0 through 7 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2007-4847 (Google Picasa allows remote attackers to read image files stored by ...)
@@ -5765,7 +5765,7 @@
 	NOT-FOR-US: IBM Lotus Notes
 CVE-2007-4308 (The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI ...)
 	{DSA-1363-1}
-	- linux-2.6 <unfixed> (medium; bug #443694)
+	- linux-2.6 2.6.22-4 (medium; bug #443694)
 CVE-2007-4307 (Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 ...)
 	NOT-FOR-US: Storesprite
 CVE-2007-4306 (Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin ...)
@@ -6810,7 +6810,7 @@
 	NOTE: MFSA2007-26
 CVE-2007-3843 (The Linux kernel before 2.6.23-rc1 checks the wrong global variable ...)
 	{DSA-1363-1}
-	- linux-2.6 <unfixed> (bug #446073)
+	- linux-2.6 2.6.23-1 (bug #446073)
 CVE-2007-3842 (Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise ...)
 	NOT-FOR-US: 8e6 R3000 Enterprise Filter
 CVE-2007-3841 (Unspecified vulnerability in Pidgin (formerly Gaim) 2.0.2 for Linux ...)