[Secure-testing-commits] r13317 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-11-18 21:58:05 +0000 (Wed, 18 Nov 2009)
New Revision: 13317

Modified:
   data/CVE/list
Log:
new kernel issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-11-18 21:14:22 UTC (rev 13316)
+++ data/CVE/list	2009-11-18 21:58:05 UTC (rev 13317)
@@ -47,7 +47,8 @@
 CVE-2009-3940 (Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox ...)
 	TODO: check
 CVE-2009-3939 (The poll_mode_io file for the megaraid_sas driver in the Linux kernel ...)
-	TODO: check
+	- linux-2.6 <unfixed> (low)
+	- linux-2.6.24 <removed> (low)
 CVE-2009-XXXX [kernel memory corruption in kvm_vcpu_ioctl_x86_setup_mce]
 	- linux-2.6 <unfixed>
 	[etch] - linux-2.6 <not-affected> (kvm introduced in 2.6.25)
@@ -165,9 +166,11 @@
 CVE-2009-3890 (Unrestricted file upload vulnerability in the wp_check_filetype ...)
 	TODO: check
 CVE-2009-3889 (The dbg_lvl file for the megaraid_sas driver in the Linux kernel ...)
-	TODO: check
+	- linux-2.6 2.6.27-1 (low)
+	- linux-2.6.24 <removed> (low)
 CVE-2009-3888 (The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before ...)
-	TODO: check
+	- linux-2.6 <unfixed> (low)
+	- linux-2.6.24 <unfixed> (low)
 CVE-2009-3887
 	RESERVED
 CVE-2009-3886 (The Java Web Start implementation in Sun Java SE 6 before Update 17 ...)