[Secure-testing-commits] r8406 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-03-25 13:20:38 +0000 (Tue, 25 Mar 2008)
New Revision: 8406

Modified:
   data/CVE/list
Log:
cveified ssh

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-03-25 13:12:47 UTC (rev 8405)
+++ data/CVE/list	2008-03-25 13:20:38 UTC (rev 8406)
@@ -11,7 +11,7 @@
 CVE-2008-1484 (The password reset feature in PunBB 1.2.16 and earlier uses ...)
 	TODO: check
 CVE-2008-1483 (OpenSSH 4.3p2, and probably other versions, allows local users to ...)
-	TODO: check
+	- openssh 1:4.7p1-5 (bug #463011)
 CVE-2008-1482 (Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote ...)
 	TODO: check
 CVE-2008-1481 (Cross-site scripting (XSS) vulnerability in index.php in webSPELL ...)
@@ -2462,8 +2462,6 @@
 CVE-2007-6694 (The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 ...)
 	{DSA-1503-2 DSA-1504-1 DSA-1503-1}
 	- linux-2.6 <unfixed>
-CVE-2008-XXXX [openssh local users may hijack forwarded X connections]
-	- openssh 1:4.7p1-5 (bug #463011)
 CVE-2008-XXXX [exempi buffer overflow in GIF ReadHeader() function]
 	- exempi 1.99.7-1 (bug #454297)
 CVE-2008-0544 (Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c ...)