[Secure-testing-commits] r10391 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-11-15 10:53:03 +0000 (Sat, 15 Nov 2008)
New Revision: 10391

Modified:
   data/CVE/list
Log:
NFU
CVE-2008-5033 fixed in linux-2.6 2.6.26-10
CVE-2008-5031 fixed in python2.5, need exact version


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-14 21:14:10 UTC (rev 10390)
+++ data/CVE/list	2008-11-15 10:53:03 UTC (rev 10391)
@@ -73,9 +73,11 @@
 	- websvn 2.0-4 (bug #503330)
 	NOTE: http://www.gulftech.org/?node=research&article_id=00132-10202008
 CVE-2008-5033 (The chip_command function in drivers/media/video/tvaudio.c in the ...)
-	TODO: check
+	- linux-2.6 2.6.26-10
+	- linux-2.6.24 <unfixed>
 CVE-2008-5031 (Multiple integer overflows in Python 2.5.2 allow context-dependent ...)
 	TODO: check
+	NOTE: fixed in python2.5, need to determine the exact version
 CVE-2008-5030 (Heap-based buffer overflow in the cddb_read_disc_data function in ...)
 	- libcdaudio 0.99.12p2-7 (bug #505478)
 CVE-2008-5024 (Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, ...)
@@ -105,7 +107,7 @@
 CVE-2008-5012 (Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, ...)
 	TODO: check
 CVE-2008-5010 (in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and ...)
-	TODO: check
+	NOT-FOR-US: in.dhcpd
 CVE-2008-XXXX [OptiPNG BMP Reader Buffer Overflow]
 	- optipng 0.6.1.1-1 (bug #505399)
 	NOTE: This is SA32651