[Secure-testing-commits] r5256 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2007-01-12 21:14:11 +0100 (Fri, 12 Jan 2007)
New Revision: 5256

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-01-12 18:40:49 UTC (rev 5255)
+++ data/CVE/list	2007-01-12 20:14:11 UTC (rev 5256)
@@ -106,7 +106,7 @@
 CVE-2007-0160 (Stack-based buffer overflow in the LiveJournal support ...)
 	TODO: LiveJournal
 CVE-2007-0159 (Directory traversal vulnerability in the GeoIP_update_database_general ...)
-	 - libgeoip1 <unfixed> (bug #406628; medium)
+	- libgeoip1 <unfixed> (bug #406628; medium)
 CVE-2007-0158
 	RESERVED
 CVE-2007-0157 (Array index error in the uri_lookup function in the URI parser for ...)
@@ -1824,6 +1824,7 @@
 	RESERVED
 CVE-2006-6318 (The show_elog_list function in elogd.c in elog 2.6.2 and earlier ...)
 	{DSA-1242-1}
+	TODO: check
 CVE-2006-6317
 	RESERVED
 CVE-2006-6316
@@ -2786,6 +2787,7 @@
 	NOTE: http://secunia.com/advisories/23230/
 CVE-2006-5872 (Unspecified vulnerability in login.pl in SQL Ledger before 2.6.21 ...)
 	{DSA-1239-1}
+	TODO: check
 CVE-2006-5871 (smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before ...)
 	{DSA-1237 DSA-1233}
 	- linux-2.6 <not-affected> (Current Linux versions already implement intended behaviour)
@@ -28148,6 +28150,7 @@
 	- spamassassin 3.0.4-1 (bug #314447; medium)
 CVE-2005-1265 (The mmap function in the Linux Kernel 2.6.10 can be used to create ...)
 	{DSA-922-1}
+	TODO: check
 CVE-2005-1264 (Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong ...)
 	- linux-2.6 <not-affected> (Fixed before upload into archive; 2.6.11.10)
 	[sarge] - kernel-source-2.6.8 2.6.8-16
@@ -30444,6 +30447,7 @@
 	- curl 7.13.0-2
 CVE-2005-0489 (The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows ...)
 	{DSA-1082-1 DSA-1070-1 DSA-1069-1 DSA-1067-1}
+	TODO: check
 CVE-2004-1702 (The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to ...)
 	- cfengine2 2.1.8-1
 CVE-2004-1701 (Heap-based buffer overflow in the AuthenticationDialogue function in ...)