[Secure-testing-commits] r12908 - data/CVE

[Florian Weimer]

Author: fw
Date: 2009-09-30 18:44:07 +0000 (Wed, 30 Sep 2009)
New Revision: 12908

Modified:
   data/CVE/list
Log:
CVE-2009-3280: etch, lenny kernels not affected

find_ie() function not present, and it's allegedly been introduced in
2.6.30-rc1.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-30 18:41:03 UTC (rev 12907)
+++ data/CVE/list	2009-09-30 18:44:07 UTC (rev 12908)
@@ -347,6 +347,9 @@
 CVE-2009-3280 (Integer signedness error in the find_ie function in ...)
 	- linux-2.6 <unfixed> (medium)
 	- linux-2.6.24 <removed>
+	[etch] - linux-2.6 <not-affected> (vulnerable code not present)
+	[lenny] - linux-2.6 <not-affected> (vulnerable code not present)
+	[etch] - linux-2.6.24 <not-affected> (vulnerable code not present)
 CVE-2009-3279 (The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 ...)
 	NOT-FOR-US: QNAP TS-239 Pro and TS-639
 CVE-2009-3278 (The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 ...)