[Secure-testing-commits] r16924 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-07-12 06:58:25 +0000 (Tue, 12 Jul 2011)
New Revision: 16924

Modified:
   data/CVE/list
   data/next-point-update.txt
   data/spu-candidates.txt
Log:
- new wireshark issue unimportant
- new nfs-kernel-server issue (not affecting stable/oldstable)
- new kernel issue
- libpcap spu upload


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-07-11 21:15:30 UTC (rev 16923)
+++ data/CVE/list	2011-07-12 06:58:25 UTC (rev 16924)
@@ -221,7 +221,8 @@
 	[etch] - groff <not-affected> (pdfroff not yet present)
 	[lenny] - groff <not-affected> (pdfroff not yet present)
 CVE-2011-2597 (The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x ...)
-	- wireshark <undetermined>
+	- wireshark 1.6.0-1 (unimportant)
+	NOTE: no code injection, not treated as a security issue, see README.Debian.security
 CVE-2011-2596
 	RESERVED
 CVE-2011-2595
@@ -388,6 +389,9 @@
 	RESERVED
 CVE-2011-2521
 	RESERVED
+	- linux-2.6 2.6.39-1 (low)
+	[squeeze] - linux-2.6 <not-affected> (Vulnerable code not present)
+	[lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
 CVE-2011-2520
 	RESERVED
 CVE-2011-2519
@@ -456,6 +460,9 @@
 	[squeeze] - libpng <no-dsa> (Minor issue)
 CVE-2011-2500
 	RESERVED
+	- nfs-kernel-server 1:1.2.4-1 (bug #633155)
+	[lenny] - nfs-kernel-server <not-affected> (Introduced in 1.2.3)
+	[squeeze] - nfs-kernel-server <not-affected> (Introduced in 1.2.3)
 CVE-2011-2499
 	RESERVED
 CVE-2011-2498

Modified: data/next-point-update.txt
===================================================================
--- data/next-point-update.txt	2011-07-11 21:15:30 UTC (rev 16923)
+++ data/next-point-update.txt	2011-07-12 06:58:25 UTC (rev 16924)
@@ -4,3 +4,6 @@
 	[squeeze] - dokuwiki 0.0.20091225c-10+squeeze2
 CVE-2011-0433
 	[squeeze] - vftool 2.0alpha-4+squeeze1
+CVE-2011-1935
+	[squeeze] - libpcap 1.1.1-2+squeeze1
+

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2011-07-11 21:15:30 UTC (rev 16923)
+++ data/spu-candidates.txt	2011-07-12 06:58:25 UTC (rev 16924)
@@ -49,12 +49,6 @@
 
 --
 
-libpcap packet truncation
-bug #623868
-awaiting maintainer response
-
---
-
 tesseract (CVE-2011-1136)
 #612032
 awaiting maintainer response