[Secure-testing-commits] r14180 - in data: CVE DSA

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-03-04 02:07:18 +0000 (Thu, 04 Mar 2010)
New Revision: 14180

Modified:
   data/CVE/list
   data/DSA/list
Log:
handle the samba CVE reject/split

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-03 22:14:11 UTC (rev 14179)
+++ data/CVE/list	2010-03-04 02:07:18 UTC (rev 14180)
@@ -69,11 +69,13 @@
 CVE-2010-0790
 	RESERVED
 CVE-2010-0789 (fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local ...)
-	TODO: check
+	- fuse 2.8.1-1.2 (bug #567633)
 CVE-2010-0788 (ncpfs 2.2.6 allows local users to cause a denial of service, obtain ...)
+	- ncpfs <undetermined>
 	TODO: check
 CVE-2010-0787 (client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, ...)
-	TODO: check
+	- samba 2:3.4.5~dfsg-2 (bug #567554)
+	NOTE: https://bugzilla.samba.org/show_bug.cgi?id=6853
 CVE-2010-0786
 	RESERVED
 CVE-2010-0785
@@ -5725,9 +5727,6 @@
 CVE-2009-3297 [mount race conditions]
 	REJECTED
 	{DSA-2004-1 DSA-1989-1}
-	- fuse 2.8.1-1.2 (bug #567633)
-	- samba 2:3.4.5~dfsg-2 (bug #567554)
-	NOTE: https://bugzilla.samba.org/show_bug.cgi?id=6853
 CVE-2009-3296 (Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow ...)
 	{DSA-1912-2 DSA-1912-1}
 	- camlimages 1:3.0.1-5 (low)

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2010-03-03 22:14:11 UTC (rev 14179)
+++ data/DSA/list	2010-03-04 02:07:18 UTC (rev 14180)
@@ -8,7 +8,7 @@
 	{CVE-2009-2691 CVE-2009-2695 CVE-2009-3080 CVE-2009-3726 CVE-2009-3889 CVE-2009-4005 CVE-2009-4020 CVE-2009-4021 CVE-2009-4138 CVE-2009-4308 CVE-2009-4536 CVE-2009-4538 CVE-2010-0003 CVE-2010-0007 CVE-2010-0291 CVE-2010-0410 CVE-2010-0415 CVE-2010-0622}
 	[etch] - linux-2.6.24 2.6.24-6~etchnhalf.9etch3
 [28 Feb 2010] DSA-2004-1 samba - several vulnerabilities
-	{CVE-2009-3297 CVE-2010-0547}
+	{CVE-2010-0787 CVE-2010-0547}
 	[lenny] - samba 2:3.2.5-4lenny9
 [22 Feb 2010] DSA-2003-1 linux-2.6 - several vulnerabilities
 	{CVE-2009-3080 CVE-2009-3726 CVE-2009-4005 CVE-2009-4020 CVE-2009-4021 CVE-2009-4536 CVE-2010-0007 CVE-2010-0410 CVE-2010-0415 CVE-2010-0622}
@@ -63,7 +63,7 @@
 	{CVE-2010-0394}
 	[lenny] - trac-git 0.0.20080710-3+lenny1
 [02 Feb 2010] DSA-1989-1 fuse - denial of service
-	{CVE-2009-3297}
+	{CVE-2010-0789}
 	[etch] - fuse 2.5.3-4.4+etch1 
 	[lenny] - fuse 2.7.4-1.1+lenny1
 [02 Feb 2010] DSA-1988-1 qt4-x11 - several vulnerabilities