[Secure-testing-commits] r9108 - data/CVE

[thomasbl-guest at alioth.debian.org]

Author: thomasbl-guest
Date: 2008-06-19 15:05:51 +0000 (Thu, 19 Jun 2008)
New Revision: 9108

Modified:
   data/CVE/list
Log:
xen-3 and xen-unstable issues, bugs: #487095 #487097



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-19 12:27:13 UTC (rev 9107)
+++ data/CVE/list	2008-06-19 15:05:51 UTC (rev 9108)
@@ -1615,6 +1615,7 @@
 	NOT-FOR-US: Sitedesigner
 CVE-2008-1952
 	RESERVED
+	- xen-3 <unfixed> (high; bug #487095)
 	- xen-unstable <not-affected> (Vulnerable code not present, introduced in changeset 17630)
 	TODO: check that next upload includes changes until changeset 17643 or higher
 CVE-2008-1951
@@ -1640,11 +1641,11 @@
 CVE-2008-1945
 	RESERVED
 CVE-2008-1944 (Buffer overflow in the backend framebuffer of XenSource Xen ...)
-	TODO: check
-	NOTE: sent email to XEN team
+	- xen-3 <unfixed> (high; bug #487095)
+	- xen-unstable <unfixed> (high; bug #487097)
 CVE-2008-1943 (Buffer overflow in the backend of XenSource Xen Para Virtualized Frame ...)
-	TODO: check
-	NOTE: sent email to XEN team
+	- xen-3 <unfixed> (high; bug #487095)
+	- xen-unstable <unfixed> (high; bug #487097)
 CVE-2008-1942 (Foxit Reader 2.2 allows remote attackers to cause a denial of service ...)
 	NOT-FOR-US: Foxit Reader
 CVE-2008-1941 (Cross-site scripting (XSS) vulnerability in the profile update feature ...)