[Secure-testing-commits] r12838 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-09-17 17:15:54 +0000 (Thu, 17 Sep 2009)
New Revision: 12838

Modified:
   data/CVE/list
Log:
kernel issue updates

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-17 16:44:04 UTC (rev 12837)
+++ data/CVE/list	2009-09-17 17:15:54 UTC (rev 12838)
@@ -620,7 +620,10 @@
 	NOT-FOR-US: Opera
 CVE-2009-3043 (The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux ...)
 	- linux-2.6 <unfixed> (medium)
+	[etch] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.31)
+	[lenny] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.31)
 	- linux-2.6.24 <removed> (medium)
+	[etch] - linux-2.6.24 <not-affected> (vulnerable code introduced in 2.6.31)
 CVE-2008-7158 (Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows ...)
 	NOT-FOR-US: Numara FootPrints
 CVE-2008-7157 (Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier ...)
@@ -4281,8 +4284,11 @@
 CVE-2009-1884 (Off-by-one error in the bzinflate function in Bzip2.xs in the ...)
 	- libcompress-raw-bzip2-perl 2.018-1 (medium; bug #542777)
 	[lenny] - libcompress-raw-bzip2-perl 2.011-2lenny1
-CVE-2009-1883
+CVE-2009-1883 [linux-2.6: crypt missing cap check]
 	RESERVED
+	- linux-2.6 2.6.19-1
+	- linux-2.6.24 <removed>
+	[etch] - linux-2.6.24 <not-affected> (problem was fixed before first upload)
 CVE-2009-1882 (Integer overflow in the XMakeImage function in magick/xwindow.c in ...)
 	{DSA-1858-1}
 	- imagemagick 7:6.5.1.0-1.1 (medium; bug #530838)