[Secure-testing-commits] r14033 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2010-02-04 21:43:08 +0000 (Thu, 04 Feb 2010)
New Revision: 14033

Modified:
   data/CVE/list
Log:
one kernel issue and another kvm issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-04 21:14:27 UTC (rev 14032)
+++ data/CVE/list	2010-02-04 21:43:08 UTC (rev 14033)
@@ -283,8 +283,11 @@
 	- systemtap <unfixed>
 	NOTE: http://sourceware.org/bugzilla/show_bug.cgi?id=11234 and RH
 	TODO: check
-CVE-2010-0410
+CVE-2010-0410 [kernel OOM via NETLINK_CONNECTOR]
 	RESERVED
+	- linux2.6 <unfixed>
+	- linux-2.6.24 <removed>
+	NOTE: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=f98bfbd78c37c5946cc53089da32a5f741efdeb7
 CVE-2010-0409 [gmime: possible buffer overflows]
 	RESERVED
 	- gmime2.2 <unfixed> (bug #568291)
@@ -693,8 +696,13 @@
 	RESERVED
 CVE-2010-0298
 	RESERVED
-CVE-2010-0297
+CVE-2010-0297 [linux kvm usb-linux.c buffer overflow]
 	RESERVED
+	- linux-2.6 <unfixed>
+	[etch] - linux-2.6 <not-affected> (kvm introduced in 2.6.25)
+	- linux-2.6.24 <not-affected> (kvm introduced in 2.6.25)
+	- kvm <removed>
+	NOTE: see RH
 CVE-2010-0296
 	RESERVED
 CVE-2010-0295 (lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read ...)