[Secure-testing-commits] r13048 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-10-19 21:53:02 +0000 (Mon, 19 Oct 2009)
New Revision: 13048

Modified:
   data/CVE/list
Log:
some very old (low-severity) kernel issues that were never appropriately studied
- submitted to kernel-sec where they will be looked at in more detail

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-19 21:30:43 UTC (rev 13047)
+++ data/CVE/list	2009-10-19 21:53:02 UTC (rev 13048)
@@ -69970,9 +69970,11 @@
 	- mysql-ocaml 1.0.3-6 (bug #314464; unimportant)
 	- php4 4:4.3.10-16 (low)
 CVE-2004-2136 (dm-crypt on Linux kernel 2.6.x, when used on certain file systems ...)
-	TODO: This looks like a minor issue, the paper is from Feb 2004, check whether this still applies
+	- linux-2.6 <unfixed> (low)
+	- linux-2.6.24 <removed> (low)
 CVE-2004-2135 (cryptoloop on Linux kernel 2.6.x, when used on certain file systems ...)
-	TODO: This looks like a minor issue, the paper is from Feb 2004, check whether this still applies
+	- linux-2.6 <unfixed> (low)
+	- linux-2.6.24 <removed> (low)
 CVE-2004-2134 (Oracle toplink mapping workBench uses a weak encryption algorithm for ...)
 	NOT-FOR-US: Oracle
 CVE-2004-2133 (Certain third-party packages for CVSup 16.1h, such as SuSE Linux, ...)