[Secure-testing-commits] r14967 - data/CVE

[Nico Golde]

Author: nion
Date: 2010-07-06 22:29:42 +0000 (Tue, 06 Jul 2010)
New Revision: 14967

Modified:
   data/CVE/list
Log:
bogofilter and l2tp got cve ids, no-dsa for bogofilter

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-06 20:31:16 UTC (rev 14966)
+++ data/CVE/list	2010-07-06 22:29:42 UTC (rev 14967)
@@ -1,6 +1,8 @@
-CVE-2010-XXXX [bogofilter]
+CVE-2010-2494 [bogofilter invalid null write]
 	- bogofilter 1.2.1-3 (low; bug #588090)
-CVE-2010-XXXX [l2tp oops]
+	[lenny] - bogofilter <no-dsa> (Minor issue)
+	NOTE: this is "only" null write to an invalid pointer, no arbitrary location
+CVE-2010-2495 [l2tp oops]
 	- linux-2.6 <unfixed>
 	[lenny] - linux-2.6 <not-affected> (vulnerability introduced in 2.6.29)
 CVE-2010-2618 (PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in ...)
@@ -282,10 +284,6 @@
 	RESERVED
 CVE-2010-2496
 	RESERVED
-CVE-2010-2495
-	RESERVED
-CVE-2010-2494
-	RESERVED
 CVE-2010-2493
 	RESERVED
 CVE-2010-2492