[Secure-testing-commits] r7386 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-24 22:04:10 +0000 (Sat, 24 Nov 2007)
New Revision: 7386

Modified:
   data/CVE/list
Log:
CVE-2007-5907, CVE-2007-5906 fixed in xen-3 3.1.2-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-24 13:34:37 UTC (rev 7385)
+++ data/CVE/list	2007-11-24 22:04:10 UTC (rev 7386)
@@ -323,10 +323,10 @@
 	NOTE: this is a bug in the kernel but not a security issue, there is no way for a user to
 	NOTE: exploit this, they can only chose an item from the list
 CVE-2007-5907 (Xen 3.1.1 does not prevent modification of the CR4 TSC from ...)
-	- xen-3 <unfixed> (medium; bug #451626)
+	- xen-3 3.1.2-1 (medium; bug #451626)
 	- xen-3.0 <unfixed>
 CVE-2007-5906 (Xen 3.1.1 allows virtual guest system users to cause a denial of ...)
-	- xen-3 <unfixed> (medium; bug #451626)
+	- xen-3 3.1.2-1 (medium; bug #451626)
 	- xen-3.0 <unfixed>
 CVE-2007-5905 (Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions ...)
 	NOT-FOR-US: Adobe ColdFusion