[Secure-testing-commits] r12677 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-08-25 16:08:10 +0000 (Tue, 25 Aug 2009)
New Revision: 12677

Modified:
   data/CVE/list
Log:
- CVE-2009-1884 was fixed in libcompress-raw-bzip2-perl 2.018-1
- some kernel issues are fixed in spu



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-08-25 14:22:39 UTC (rev 12676)
+++ data/CVE/list	2009-08-25 16:08:10 UTC (rev 12677)
@@ -328,18 +328,22 @@
 	{DSA-1872-1}
 	- linux-2.6 2.6.30-4 (medium)
 	- linux-2.6.24 <removed>
+	TODO: add after r3 [lenny] - linux-2.6 2.6.26-19 (medium)
 CVE-2009-2848 (The execve function in the Linux kernel, possibly 2.6.30-rc6 and ...)
 	{DSA-1872-1}
 	- linux-2.6 <unfixed> (low)
 	- linux-2.6.24 <removed>
+	TODO: add after r3 [lenny] - linux-2.6 2.6.26-19 (low)
 CVE-2009-2847 (The do_sigaltstack function in kernel/signal.c in Linux kernel 2.6 ...)
 	{DSA-1872-1}
 	- linux-2.6 2.6.30-6 (low)
 	- linux-2.6.24 <removed>
+	TODO: add after r3 [lenny] - linux-2.6 2.6.26-19 (low)
 CVE-2009-2846 (The eisa_eeprom_read function in the parisc isa-eeprom component ...)
 	{DSA-1872-1}
 	- linux-2.6 2.6.30-6 (low)
 	- linux-2.6.24 <removed>
+	TODO: add after r3 [lenny] - linux-2.6 2.6.26-19 (low)
 CVE-2009-2844 (cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and ...)
 	- linux-2.6 <unfixed> (medium)
 	[etch] - linux-2.6 <not-affected> (vulnerability introduced in 2.6.30)
@@ -3162,7 +3166,7 @@
 	- xerces-c2 2.8.0+deb1-2 (low; bug #541986)
 	- xerces27 <removed>
 CVE-2009-1884 (Off-by-one error in the bzinflate function in Bzip2.xs in the ...)
-	- libcompress-raw-bzip2-perl <unfixed> (medium; bug #542777)
+	- libcompress-raw-bzip2-perl 2.018-1 (medium; bug #542777)
 CVE-2009-1883
 	RESERVED
 CVE-2009-1882 (Integer overflow in the XMakeImage function in magick/xwindow.c in ...)