[Secure-testing-commits] r8278 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-03-06 12:10:25 +0000 (Thu, 06 Mar 2008)
New Revision: 8278

Modified:
   data/CVE/list
Log:
NFUs
new qemu issue (CVE-2008-0928) also affecting xen and kvm


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-03-06 10:11:39 UTC (rev 8277)
+++ data/CVE/list	2008-03-06 12:10:25 UTC (rev 8278)
@@ -154,9 +154,9 @@
 CVE-2008-1059 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Sniplets plugin for WordPress
 CVE-2008-1058 (The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 ...)
-	TODO: check
+	NOT-FOR-US: OpenBSD
 CVE-2008-1057 (The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 ...)
-	TODO: check
+	NOT-FOR-US: OpenBSD
 CVE-2008-1056 (Multiple stack-based buffer overflows in Symark PowerBroker 2.8 ...)
 	NOT-FOR-US: Symark PowerBroker
 CVE-2003-1545 (Absolute path traversal vulnerability in nukestyles.com viewpage.php ...)
@@ -432,7 +432,11 @@
 CVE-2008-0929
 	REJECTED
 CVE-2008-0928 (Qemu 0.9.1 and earlier does not perform range checks for block device ...)
-	TODO: check
+	- qemu <unfixed> (low; bug #469649)
+	- xen-unstable <unfixed> (bug #469654)
+	- xen-3 <unfixed> (bug #469662)
+	- xen-3.0 <removed>
+	- kvm <unfixed> (bug #469666)
 CVE-2008-0927
 	RESERVED
 CVE-2008-0926