[Secure-testing-commits] r12115 - data/CVE

Giuseppe Iuculano derevko-guest at alioth.debian.org
Fri Jun 12 23:34:35 UTC 2009


Author: derevko-guest
Date: 2009-06-12 23:34:34 +0000 (Fri, 12 Jun 2009)
New Revision: 12115

Modified:
   data/CVE/list
Log:
- checked strongswan non-affected status
- new git issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-12 21:14:17 UTC (rev 12114)
+++ data/CVE/list	2009-06-12 23:34:34 UTC (rev 12115)
@@ -1,3 +1,7 @@
+CVE-2009-XXXX [git-daemon Parameter Parsing Infinite Loop Denial of Service]
+	- git-core <unfixed> (medium; bug #532935)
+	[etch] - git-core <not-affected> (Vulnerable code not present)
+	NOTE: http://git.kernel.org/?p=git/git.git;a=commitdiff;h=73bb33a9
 CVE-2009-2031 (smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount ...)
 	TODO: check
 CVE-2009-2030 (Unspecified vulnerability in the XML Digital Signature verification ...)
@@ -459,11 +463,9 @@
 CVE-2009-1957 (charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 ...)
 	- strongswan <unfixed> (medium; bug #531612)
 	[etch] - strongswan <not-affected> (Vulnerable code not present, IKEv2 was introduced in 4.3)
-	TODO: Check not-affected status after split of temporary entry
 CVE-2009-1958 (charon/sa/tasks/child_create.c in the charon daemon in strongSWAN ...)
 	- strongswan <unfixed> (medium; bug #531612)
 	[etch] - strongswan <not-affected> (Vulnerable code not present, IKEv2 was introduced in 4.3)
-	TODO: Check not-affected status after split of temporary entry
 CVE-2009-1841 [JavaScript chrome privilege escalation]
 	RESERVED
 	- xulrunner <unfixed>




More information about the Secure-testing-commits mailing list