[Secure-testing-commits] r11524 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-04-01 18:51:33 +0000 (Wed, 01 Apr 2009)
New Revision: 11524

Modified:
   data/CVE/list
Log:
update kernel issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-04-01 18:48:29 UTC (rev 11523)
+++ data/CVE/list	2009-04-01 18:51:33 UTC (rev 11524)
@@ -907,7 +907,10 @@
 CVE-2009-0860 (Cross-site scripting (XSS) vulnerability in the web user interface in ...)
 	NOT-FOR-US: NetMRI
 CVE-2009-0859 (The shm_get_stat function in ipc/shm.c in the shm subsystem in the ...)
-	- linux-2.6 2.6.29-1
+	- linux-2.6 2.6.29-1 (unimportant)
+	NOTE: All Debian kernels set CONFIG_SHMEM, so this is moot except
+	NOTE: for locally modified configs and even for that I fail to
+	NOTE: see why anyone would run a kernel w/o CONFIG_SHMEM?
 CVE-2009-0858 (The response_addname function in response.c in Daniel J. Bernstein ...)
 	- djbdns 1:1.05-5 (low; bug #518169; bug #517631)
 CVE-2009-0857 (Cross-site scripting (XSS) vulnerability in /prm/reports in the ...)