[Secure-testing-commits] r8113 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-02-08 23:41:45 +0000 (Fri, 08 Feb 2008)
New Revision: 8113

Modified:
   data/CVE/list
Log:
two new kernel issues
mozilla status updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-08 21:58:10 UTC (rev 8112)
+++ data/CVE/list	2008-02-08 23:41:45 UTC (rev 8113)
@@ -98,15 +98,22 @@
 CVE-2008-0594
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
 CVE-2008-0593
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
 CVE-2008-0592
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
 CVE-2008-0591
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- icedove <unfixed>
 CVE-2008-0590 (Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows ...)
 	TODO: check
 CVE-2008-0589 (The ps program in bos.rte.control in IBM AIX 5.2, 5.3, and 6.1 allows ...)
@@ -502,26 +509,44 @@
 CVE-2008-0419
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
+	- icedove <unfixed>
 CVE-2008-0418
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
+	- icedove <unfixed>
 CVE-2008-0417
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
 CVE-2008-0416
 	RESERVED
 CVE-2008-0415
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- iceape <unfixed>
+	- icedove <unfixed>
+	- xulrunner <unfixed>
 CVE-2008-0414
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
 CVE-2008-0413
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
+	- icedove <unfixed>
 CVE-2008-0412
 	RESERVED
 	- iceweasel 2.0.0.12-1
+	- xulrunner <unfixed>
+	- iceape <unfixed>
+	- icedove <unfixed>
 CVE-2008-0411
 	RESERVED
 CVE-2007-6694 (The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 ...)
@@ -2526,13 +2551,15 @@
 	NOT-FOR-US: KML share
 CVE-2008-0010
 	RESERVED
-CVE-2008-0009
+CVE-2008-0009 [kernel: insecure dereference of memory refs from user space, local priv escalation]
 	RESERVED
+	- linux-2.6 <unfixed>
 CVE-2008-0008 (The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 ...)
 	{DSA-1476-1}
 	- pulseaudio 0.9.9-1
-CVE-2008-0007
+CVE-2008-0007 [kernel: insufficient range checks of certain fault handlers]
 	RESERVED
+	- linux-2.6 <unfixed> 
 CVE-2008-0006 (Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont ...)
 	{DSA-1466-2 DTSA-110-1}
 	- xorg-server 2:1.4.1~git20080105-2