[Secure-testing-commits] r12308 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-07-08 00:16:35 +0000 (Wed, 08 Jul 2009)
New Revision: 12308

Modified:
   data/CVE/list
Log:
more syncs from kernel-sec tracker


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-07-08 00:04:19 UTC (rev 12307)
+++ data/CVE/list	2009-07-08 00:16:35 UTC (rev 12308)
@@ -942,7 +942,9 @@
 CVE-2009-1961 (The inode double locking code in fs/ocfs2/file.c in the Linux kernel ...)
 	- linux-2.6 2.6.30-1 (low)
 	[etch] - linux-2.6 <not-affected> (Affected code was introduced in 2.6.19)
+	[lenny] - linux-2.6 2.6.26-16
 	- linux-2.6.24 <removed>
+	NOTE: fixed in lenny 5.0.2 release
 CVE-2009-1959 (Off-by-one error in the event_wallops function in ...)
 	- irssi 0.8.13-2 (low; bug #532607; bug #531357)
 	TODO: add after r3 [lenny] - irssi 0.8.12-7
@@ -1046,8 +1048,10 @@
 CVE-2009-1915 (Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ...)
 	NOT-FOR-US: ICQ
 CVE-2009-1914 (The pci_register_iommu_region function in ...)
-	- linux-2.6 2.6.30-1 (low; bug #532722)
+	- linux-2.6 2.6.29-1 (low; bug #532722)
+	[lenny] - linux-2.6 2.6.26-16
 	- linux-2.6.24 <removed>
+	NOTE: updated in lenny 5.0.2 release
 CVE-2009-1913 (SQL injection vulnerability in manager.php in LuxBum 0.5.5, when ...)
 	NOT-FOR-US: LuxBum
 CVE-2009-1912 (Directory traversal vulnerability in src/func/language.php in webSPELL ...)