[Secure-testing-commits] r16876 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-07-01 19:38:42 +0000 (Fri, 01 Jul 2011)
New Revision: 16876

Modified:
   data/CVE/list
Log:
lenny kernel updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-07-01 19:30:10 UTC (rev 16875)
+++ data/CVE/list	2011-07-01 19:38:42 UTC (rev 16876)
@@ -2602,7 +2602,8 @@
 CVE-2011-1585
 	RESERVED
 	{DSA-2240-1}
-	- linux-2.6 <unfixed>
+	- linux-2.6 <unfixed> (unimportant)
+	NOTE: an exploitation requires the ability to run mount.cifs w/ root privs
 CVE-2011-1584 (The updateFile function in inc/core/class.dc.media.php in the Media ...)
 	TODO: check
 CVE-2011-1583
@@ -2935,6 +2936,7 @@
 	RESERVED
 	{DSA-2240-1}
 	- linux-2.6 2.6.38-1
+	[lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
 CVE-2011-1477
 	RESERVED
 	{DSA-2264-1 DSA-2240-1}
@@ -4284,6 +4286,7 @@
 	[squeeze] - pam-pgsql 0.7.1-4+squeeze1
 CVE-2011-1044 (The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c ...)
 	- linux-2.6 2.6.32-30
+	[lenny] - linux-2.6 2.6.26-26lenny2
 CVE-2011-1043
 	RESERVED
 CVE-2011-1042 (Use-after-free vulnerability in flimflamd in flimflam in Google Chrome ...)