[Secure-testing-commits] r13063 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-10-21 21:14:19 +0000 (Wed, 21 Oct 2009)
New Revision: 13063

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-21 20:51:04 UTC (rev 13062)
+++ data/CVE/list	2009-10-21 21:14:19 UTC (rev 13063)
@@ -661,7 +661,7 @@
 	- xen-tools <unfixed> (low; bug #548909)
 	[lenny] - xen-tools <no-dsa> (Minor issue)
 	TODO: request CVE id
-        NOTE: Maintainer will look into an update for stable
+	NOTE: Maintainer will look into an update for stable
 CVE-2009-3446 (SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) ...)
 	NOT-FOR-US: com_mytube component for Joomla!
 CVE-2009-3445 (Unspecified vulnerability in Code-Crafters Ability Mail Server before ...)
@@ -1045,7 +1045,7 @@
 CVE-2009-3271 (Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a ...)
 	NOT-FOR-US: Apple Safari on iPhone OS 3.0.1
 CVE-2009-3290 (The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the ...)
-	{DSA-1907-1}
+	{DSA-1907-1 DTSA-203-1}
 	- linux-2.6 2.6.31-1 (medium)
 	[etch] - linux-2.6 <not-affected> (introduced in 2.6.25)
 	- linux-2.6.24 <not-affected> (introduced in 2.6.25)
@@ -2423,8 +2423,7 @@
 	RESERVED
 	- systemtap <unfixed> (bug filed)
 	[lenny] - systemtap <not-affected> (Affected functionality only added in 1.0)
-CVE-2009-2910 [linux-2.6: 64-bit registers leaked to 32-bit processes]
-	RESERVED
+CVE-2009-2910 (arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the ...)
 	- linux-2.6 <unfixed> (medium)
 	- linux-2.6.24 <unfixed> (medium)
 CVE-2009-2909 (Integer signedness error in the ax25_setsockopt function in ...)
@@ -12619,7 +12618,7 @@
 	- iceweasel <unfixed> (unimportant)
 	NOTE: Browser crashes not treated as security issues
 CVE-2008-5714 (Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for ...)
-	{DSA-1907-1}
+	{DSA-1907-1 DTSA-203-1}
 	- qemu 0.9.1-10 (low; bug #509882)
 	[etch] - qemu <not-affected> (Vulnerable code not present)
 	- kvm 82-1 (low; bug #509997)