[Secure-testing-commits] r6684 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-09-24 19:34:35 +0000 (Mon, 24 Sep 2007)
New Revision: 6684

Modified:
   data/CVE/list
Log:
- new linux local root vuln
- new issues fixed: mp, coolkey


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-24 15:26:36 UTC (rev 6683)
+++ data/CVE/list	2007-09-24 19:34:35 UTC (rev 6684)
@@ -1,3 +1,5 @@
+CVE-2007-XXXX [mimep insecure tempfile usage and insecure calls to LaTeX and dvips]
+	- mp 3.7.1-8
 CVE-2007-5019 (Buffer overflow in the Sun Java Web Start ActiveX control in Java ...)
 	TODO: check
 CVE-2007-5018 (Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote ...)
@@ -996,8 +998,9 @@
 	RESERVED
 CVE-2007-4574
 	RESERVED
-CVE-2007-4573
+CVE-2007-4573 [linux local privilege escalation on x86_64]
 	RESERVED
+	- linux-2.6 <unfixed> (medium)
 CVE-2007-4572
 	RESERVED
 CVE-2007-4571
@@ -1975,8 +1978,9 @@
 	- tar 1.18-2 (high; bug #439335)
 CVE-2007-4130
 	RESERVED
-CVE-2007-4129
+CVE-2007-4129 [coolkey incorrect cache file handling]
 	RESERVED
+	- coolkey 1.1.0-3
 CVE-2007-4128 (SQL injection vulnerability in index.php in the Firestorm Technologies ...)
 	NOT-FOR-US: com_gmaps for Joomla!
 CVE-2007-4127 (** DISPUTED ** ...)