[Secure-testing-commits] r7039 - data/CVE
jmm-guest at alioth.debian.org
jmm-guest at alioth.debian.org
Sat Oct 20 13:11:19 UTC 2007
Author: jmm-guest
Date: 2007-10-20 13:11:18 +0000 (Sat, 20 Oct 2007)
New Revision: 7039
Modified:
data/CVE/list
Log:
add not-affected for krb5 issue in sarge
remove kernel-source-* entries, handled through kernel-sec, only
linux-2.6 is used in the tracker
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2007-10-20 13:05:48 UTC (rev 7038)
+++ data/CVE/list 2007-10-20 13:11:18 UTC (rev 7039)
@@ -2295,6 +2295,7 @@
CVE-2007-4743 (The original patch for CVE-2007-3999 in svc_auth_gss.c in the ...)
{DSA-1387-1 DSA-1367-1}
- krb5 1.6.dfsg.1-7 (high; bug #441209)
+ [sarge] - krb5 <not-affected> (Vulnerable code not present)
- librpcsecgss 0.14-4 (high; bug #441393)
NOTE: http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86
NOTE: 1.6.dfsg.1-7 somehow already includes the updated version
@@ -3271,7 +3272,7 @@
CVE-2007-4312 (SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 ...)
NOT-FOR-US: Php Blue Dragon CMS
CVE-2007-4311 (The xfer_secondary_pool function in drivers/char/random.c in the Linux ...)
- - kernel-source-2.4.27 <unfixed>
+ - linux-2.6 <unfixed>
CVE-2007-4310 (The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows ...)
NOT-FOR-US: Solaris
CVE-2007-4309 (IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote ...)
@@ -8309,8 +8310,6 @@
CVE-2007-2172 (A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 ...)
{DSA-1363-1 DSA-1356-1}
- linux-2.6 2.6.21-1 (medium)
- - kernel-source-2.4.27 (medium; bug #439224)
- - kernel-source-2.6.8 (medium; bug #439225)
CVE-2007-2171 (Stack-based buffer overflow in the base64_decode function in ...)
NOT-FOR-US: Novell GroupWise
CVE-2007-2170 (The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not ...)
More information about the Secure-testing-commits
mailing list