[Secure-testing-commits] r13752 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2010-01-07 19:46:59 +0000 (Thu, 07 Jan 2010)
New Revision: 13752

Modified:
   data/CVE/list
Log:
two more linux issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-01-07 19:42:40 UTC (rev 13751)
+++ data/CVE/list	2010-01-07 19:46:59 UTC (rev 13752)
@@ -41,14 +41,19 @@
 	RESERVED
 CVE-2010-0096
 	RESERVED
-CVE-2009-4538
+CVE-2009-4538 [incorrect fix for CVE-2009-1385 on the e1000e driver]
 	RESERVED
+	- linux-2.6 <unfixed> (medium)
+	- linux-2.6.24 <removed> (medium)
+	NOTE: just like CVE-2009-4536 but was reported later
 CVE-2009-4537 [linux DoS introduced by CVE-2009-1389 fix]
 	RESERVED
 	- linux-2.6 <unfixed> (medium; bug #564110)
 	- linux-2.6.24 <removed> (medium)
-CVE-2009-4536
+CVE-2009-4536 [linux incorrect fix for CVE-2009-1385]
 	RESERVED
+	- linux-2.6 <unfixed> (medium)
+	- linux-2.6.24 <removed> (medium)
 CVE-2009-4535 (Mongoose 2.8.0 and earlier allows remote attackers to obtain the ...)
 	NOT-FOR-US: Mongoose
 CVE-2009-4534 (Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before ...)