[Secure-testing-commits] r8750 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-05-08 21:08:48 +0000 (Thu, 08 May 2008)
New Revision: 8750

Modified:
   data/CVE/list
Log:
new kernel issue
rewrite some bugzilla entries, since  a bugzilla 3.0.4 package is in NEW


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-08 20:38:15 UTC (rev 8749)
+++ data/CVE/list	2008-05-08 21:08:48 UTC (rev 8750)
@@ -22,11 +22,12 @@
 CVE-2008-2106 (Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated ...)
 	NOT-FOR-US: Call of Duty
 CVE-2008-2105 (email_in.pl in Bugzilla 2.23.4, and later versions before 3.0, allows ...)
-	- bugzilla <not-affected> (vulnerable code introduced in 2.23.4)
+	- bugzilla 3.0.4-1
+	[etch] - bugzilla <not-affected> (vulnerable code introduced in 2.23.4)
 CVE-2008-2104 (The WebService in Bugzilla before 3.1.3 allows remote authenticated ...)
 	- bugzilla <not-affected> (regression introduced in 3.1.3 referring to upstream)
 CVE-2008-2103 (Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later ...)
-	- bugzilla <unfixed> (low; bug #480190)
+	- bugzilla 3.0.4-1 (low; bug #480190)
 CVE-2008-2102
 	RESERVED
 CVE-2008-2101
@@ -976,7 +977,8 @@
 	- kdelibs <not-affected> (Vulnerable code introduce in kde 4.0)
 	- kde4libs 4:4.0.72-1 (bug #478283)
 CVE-2008-1669 (Linux kernel before 2.6.25.2 does not apply a certain protection ...)
-	TODO: check
+	- linux-2.6 <unfixed>
+        NOTE: 0b2bac2f1ea0d33a3621b27ca68b9ae760fca2e9
 CVE-2008-1668
 	RESERVED
 CVE-2008-1667