[Secure-testing-commits] r16894 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-07-05 05:59:04 +0000 (Tue, 05 Jul 2011)
New Revision: 16894

Modified:
   data/CVE/list
Log:
fixes for linux-2.6


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-07-04 22:18:16 UTC (rev 16893)
+++ data/CVE/list	2011-07-05 05:59:04 UTC (rev 16894)
@@ -290,12 +290,12 @@
 	RESERVED
 CVE-2011-2518
 	RESERVED
-	- linux-2.6 <unfixed> (low)
+	- linux-2.6 2.6.39-3 (low)
 	[squeeze] - linux-2.6 <not-affected> (Vulnerable code not present)
 	[lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
 CVE-2011-2517
 	RESERVED
-	- linux-2.6 <unfixed> (unimportant)
+	- linux-2.6 2.6.39-3 (unimportant)
 	[lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
 	NOTE: Requires CAP_NET_ADMIn to exploit
 CVE-2011-2516
@@ -346,7 +346,7 @@
 	- linux-2.6 2.6.39-1 (low)
 CVE-2011-2497
 	RESERVED
-	- linux-2.6 <unfixed>
+	- linux-2.6 2.6.39-3
 CVE-2011-2496
 	RESERVED
 	- linux-2.6 2.6.39-1 (low)
@@ -382,7 +382,7 @@
 	RESERVED
 	- gdk-pixbuf 2.23.3-3.1 (bug #631524)
 CVE-2011-2484 (The add_del_listener function in kernel/taskstats.c in the Linux ...)
-	- linux-2.6 <unfixed> (low)
+	- linux-2.6 2.6.39-3 (low)
 CVE-2011-2483 [openwall blowfish implementation weakness]
 	RESERVED
 	- libcrypt-eksblowfish-perl <not-affected> (discovered and corrected in initial release in 2007)
@@ -981,7 +981,7 @@
 	NOT-FOR-US: VMware
 CVE-2011-2213 [kernel: inet_diag: fix inet_diag_bc_audit]
 	RESERVED
-	- linux-2.6 <unfixed>
+	- linux-2.6 3.6.39-3
 CVE-2011-2212
 	RESERVED
 CVE-2011-2207
@@ -1139,7 +1139,7 @@
 	[squeeze] - linux-2.6 <not-affected> (Introduced in 2.6.39)
 CVE-2011-2183 [race condition in KSM]
 	RESERVED
-	- linux-2.6 <unfixed>
+	- linux-2.6 2.6.39-3 (low)
 	[lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
 CVE-2011-XXXX [login: tty hijacking possible in "su" via TIOCSTI ioctl]
 	- shadow <unfixed> (bug #628843)
@@ -2741,7 +2741,7 @@
 	- mediawiki <unfixed> 
 CVE-2011-1577 (Heap-based buffer overflow in the is_gpt_valid function in ...)
 	{DSA-2264-1}
-	- linux-2.6 <unfixed> (low)
+	- linux-2.6 2.6.39-3 (low)
 CVE-2011-1576
 	RESERVED
 CVE-2011-1575 (The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 ...)