[Secure-testing-commits] r8928 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-05-29 12:39:32 +0000 (Thu, 29 May 2008)
New Revision: 8928

Modified:
   data/CVE/list
Log:
Add information about kfreebsd provided by the maintainer

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-29 07:46:11 UTC (rev 8927)
+++ data/CVE/list	2008-05-29 12:39:32 UTC (rev 8928)
@@ -2255,8 +2255,8 @@
 	- egroupware 1.4.002.dfsg-2.1 (bug #471839)
 	- wordpress 2.5.0-1
 CVE-2008-1391 (Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, ...)
-	- kfreebsd-6 <unfixed>
-	- kfreebsd-7 <unfixed> (bug #483152)
+	- kfreebsd-6 <not-affected> (see bug #483152)
+	- kfreebsd-7 <not-affected> (see bug #483152)
 CVE-2008-1390 (The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before ...)
 	- asterisk 1:1.4.19.1~dfsg-1 (low)
 	[etch] - asterisk <not-affected> (Only 1.4.x affected)
@@ -2861,7 +2861,7 @@
 CVE-2008-1146 (A certain pseudo-random number generator (PRNG) algorithm that uses ...)
 	- kfreebsd-5 <removed>
 	[etch] - kfreebsd-5 <no-dsa> (KFreebsd not supported)
-	- kfreebsd-6 <unfixed>
+	- kfreebsd-6 <unfixed> (bug #483152)
 	- kfreebsd-7 <unfixed> (bug #483152)
 CVE-2008-1144
 	RESERVED
@@ -3708,8 +3708,8 @@
 CVE-2008-0777 (The sendfile system call in FreeBSD 5.5 through 7.0 does not check the ...)
 	- kfreebsd-5 <removed>
 	[etch] - kfreebsd-5 <no-dsa> (FreeBSD not supported)
-	- kfreebsd-6 <unfixed>
-	- kfreebsd-7 <unfixed> (bug #483152)
+	- kfreebsd-6 6.3-3 (bug #483152)
+	- kfreebsd-7 7.0-1 (bug #483152)
 CVE-2008-0776 (SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows ...)
 	NOT-FOR-US: iTechBids
 CVE-2008-0775 (Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple ...)
@@ -5042,12 +5042,12 @@
 CVE-2008-0217 (The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes ...)
 	- kfreebsd-5 <removed>
 	[etch] - kfreebsd-5 <no-dsa> (FreeBSD not supported)
-	- kfreebsd-6 <unfixed>
-	- kfreebsd-7 <unfixed> (bug #483152)
+	- kfreebsd-6 <not-affected> (see bug #483152)
+	- kfreebsd-7 <not-affected> (see bug #483152)
 CVE-2008-0216 (The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not ...)
-	- kfreebsd-5 <not-affected>
-	- kfreebsd-6 <unfixed>
-	- kfreebsd-7 <unfixed> (bug #483152)
+	- kfreebsd-5 <not-affected> (see bug #483152)
+	- kfreebsd-6 <not-affected> (see bug #483152)
+	- kfreebsd-7 <not-affected> (see bug #483152)
 CVE-2008-0215 (Multiple unspecified vulnerabilities in HP Storage Essentials Storage ...)
 	NOT-FOR-US: HP SRM
 CVE-2008-0214 (Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, ...)
@@ -5134,8 +5134,8 @@
 CVE-2008-0178 (Cross-site scripting (XSS) vulnerability in the Enterprise Admin ...)
 	NOT-FOR-US: Liferay Portal
 CVE-2008-0177 (The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME ...)
-	- kfreebsd-7 <unfixed> (bug #483152)
-	- kfreebsd-6 <unfixed>
+	- kfreebsd-7 <not-affected> (see bug #483152)
+	- kfreebsd-6 <not-affected> (see bug #483152)
 	- kfreebsd-5 <removed>
 	[etch] - kfreebsd-5 <no-dsa> (FreeBSD not supported)
 	NOTE: Linux kernel code is not affected, the proper check is there