[Secure-testing-commits] r9173 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-06-26 21:46:06 +0000 (Thu, 26 Jun 2008)
New Revision: 9173

Modified:
   data/CVE/list
Log:
two new kernel issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-26 21:37:26 UTC (rev 9172)
+++ data/CVE/list	2008-06-26 21:46:06 UTC (rev 9173)
@@ -33,8 +33,11 @@
 	NOT-FOR-US: Apple Mac OS
 CVE-2008-2829 (php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete ...)
 	TODO: check
-CVE-2008-2826
+CVE-2008-2826 [sctp overflow]
 	RESERVED
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <unfixed>
+        NOTE: 735ce972fbc8a65fb17788debd7bbe7b4383cc62
 CVE-2008-2825 (Cross-site scripting (XSS) vulnerability in the embedded Web Server in ...)
 	NOT-FOR-US: Xerox WorkCentre
 CVE-2008-2824 (Unspecified vulnerability in the Extensible Interface Platform in Web ...)
@@ -995,8 +998,12 @@
 	RESERVED
 CVE-2008-2373
 	RESERVED
-CVE-2008-2372
+CVE-2008-2372 [vm resource starvation local DoS]
 	RESERVED
+	- linux-2.6 <unfixed>
+        [etch] - linux-2.6 <not-affected> (Introduced between 2.6.23 and 2.6.24)
+	- linux-2.6.24 <unfixed>
+        NOTE: 89f5b7da2a6bad2e84670422ab8192382a5aeb9f
 CVE-2008-2371
 	RESERVED
 CVE-2008-2370