[Secure-testing-commits] r11431 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2009-03-17 15:25:04 +0000 (Tue, 17 Mar 2009)
New Revision: 11431

Modified:
   data/CVE/list
Log:
- NFU
- new virtualbox-ose issue (high; CVE-2009-0876)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-17 14:39:56 UTC (rev 11430)
+++ data/CVE/list	2009-03-17 15:25:04 UTC (rev 11431)
@@ -66,9 +66,10 @@
 	{DSA-1737-1}
 	- wesnoth 1:1.4.7-4
 CVE-2009-0877 (Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System ...)
-	TODO: check
+	NOT-FOR-US: Sun Java System Communications Express
 CVE-2009-0876 (Unspecified vulnerability in Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, ...)
-	TODO: check
+	- virtualbox-ose <unfixed> (high; bug #520126)
+	[lenny] - virtualbox-ose <not-affected> (lenny version doesn't install binaries with suid 0)
 CVE-2009-0875 (Race condition in the Doors subsystem in the kernel in Sun Solaris 8 ...)
 	NOT-FOR-US: Sun Solaris
 CVE-2009-0874 (Multiple unspecified vulnerabilities in the Doors subsystem in the ...)