[Secure-testing-commits] r10363 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-11-11 12:34:22 +0000 (Tue, 11 Nov 2008)
New Revision: 10363

Modified:
   data/CVE/list
Log:
four new kernel issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-11 12:32:16 UTC (rev 10362)
+++ data/CVE/list	2008-11-11 12:34:22 UTC (rev 10363)
@@ -1,3 +1,9 @@
+CVE-2008-5025 [kernel: one more hfsplus issue]
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <unfixed>
+CVE-2008-5029 [kernel: net/core/scm.c DoS]
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <unfixed>
 CVE-2008-XXXX [Trac Multiple Vulnerabilities]
 	- trac <unfixed> (bug #505197)
 CVE-2008-5008 (Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or ...)
@@ -52,9 +58,11 @@
 	- aegis 4.24-3.1 (low; bug #496400)
 	[etch] - aegis <no-dsa> (Minor issue)
 CVE-2008-4934 (The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the ...)
-	TODO: check
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <unfixed>
 CVE-2008-4933 (Buffer overflow in the hfsplus_find_cat function in ...)
-	TODO: check
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <unfixed>
 CVE-2008-4932 (webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 ...)
 	NOT-FOR-US: U-Mail Webmail server
 CVE-2008-XXXX [universalindentgui insecure usage of temp files]