[Secure-testing-commits] r7849 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-01-07 19:32:01 +0000 (Mon, 07 Jan 2008)
New Revision: 7849

Modified:
   data/CVE/list
Log:
CVE-2007-6601, CVE-2007-6600, CVE-2007-6067, CVE-2007-4772, CVE-2007-4769 fixed in postgresql-8.2 8.2.6-1, postgresql-8.1 8.1.11-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-07 17:50:09 UTC (rev 7848)
+++ data/CVE/list	2008-01-07 19:32:01 UTC (rev 7849)
@@ -252,10 +252,16 @@
 	NOT-FOR-US: Hot or Not Clone
 CVE-2007-6602 (SQL injection vulnerability in app/models/identity.php in NoseRub ...)
 	NOT-FOR-US: NoseRub
-CVE-2007-6601
+CVE-2007-6601 [dblink privilege escalation in postgresql]
 	RESERVED
-CVE-2007-6600
+	- postgresql-8.2 8.2.6-1
+	- postgresql-8.1 8.1.11-1
+	NOTE: see http://www.postgresql.org/about/news.905
+CVE-2007-6600 [privilege escalation in postgresql]
 	RESERVED
+	- postgresql-8.2 8.2.6-1
+	- postgresql-8.1 8.1.11-1
+	NOTE: see http://www.postgresql.org/about/news.905
 CVE-2007-6597 (Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before ...)
 	NOT-FOR-US: IPortalX
 CVE-2007-6599 (Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 ...)
@@ -1518,8 +1524,11 @@
 	RESERVED
 CVE-2007-6068
 	RESERVED
-CVE-2007-6067
+CVE-2007-6067 [remote denial of service in postgresql via crafted regex]
 	RESERVED
+	- postgresql-8.2 8.2.6-1
+	- postgresql-8.1 8.1.11-1
+	NOTE: see http://www.postgresql.org/about/news.905
 CVE-2007-6066
 	RESERVED
 CVE-2007-6065
@@ -5575,14 +5584,20 @@
 	RESERVED
 CVE-2007-4773
 	RESERVED
-CVE-2007-4772
+CVE-2007-4772 [remote denial of service in postgresql via crafted regex]
 	RESERVED
+	- postgresql-8.2 8.2.6-1
+	- postgresql-8.1 8.1.11-1
+	NOTE: see http://www.postgresql.org/about/news.905
 CVE-2007-4771
 	RESERVED
 CVE-2007-4770
 	RESERVED
-CVE-2007-4769
+CVE-2007-4769 [remote denial of service in postgresql via crafted regex]
 	RESERVED
+	- postgresql-8.2 8.2.6-1
+	- postgresql-8.1 8.1.11-1
+	NOTE: see http://www.postgresql.org/about/news.905
 CVE-2007-4768 (Heap-based buffer overflow in Perl-Compatible Regular Expression ...)
 	{DSA-1399-1 DTSA-77-1}
 	- pcre3 7.3-1