[Secure-testing-commits] r17538 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-11-01 06:38:19 +0000 (Tue, 01 Nov 2011)
New Revision: 17538

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
new kernel issue
bugnum for cherokee


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-11-01 06:29:47 UTC (rev 17537)
+++ data/CVE/list	2011-11-01 06:38:19 UTC (rev 17538)
@@ -303,6 +303,9 @@
 	RESERVED
 CVE-2011-4097
 	RESERVED
+	- linux-2.6 <unfixed>
+	[squeeze] - linux-2.6 <not-affected> (Introduced in 2.6.39)
+	[lenny] - linux-2.6 <not-affected> (Introduced in 2.6.39)
 CVE-2011-4096
 	RESERVED
 CVE-2011-4095
@@ -5679,7 +5682,7 @@
 	[lenny] - vlc <not-affected> (Vulnerable code not present)
 	NOTE: http://repo.or.cz/w/vlc.git/commitdiff/cd929923ff49175a501bb3e9553a683bc42ff61c
 CVE-2011-2190 (The generate_admin_password function in Cherokee before 1.2.99 uses ...)
-	- cherokee <unfixed> (low)
+	- cherokee <unfixed> (low; bug #647205)
 	[squeeze] - cherokee <no-dsa> (Minor issue)
 	[lenny] - cherokee <no-dsa> (Minor issue)
 	NOTE: http://code.google.com/p/cherokee/issues/detail?id=1212

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2011-11-01 06:29:47 UTC (rev 17537)
+++ data/spu-candidates.txt	2011-11-01 06:38:19 UTC (rev 17538)
@@ -20,6 +20,11 @@
 
 --
 
+cherokee (CVE-2011-2190)
+#647205
+
+--
+
 fail2ban [fail2ban: Insecure creating/writing to tmpfile]
 #544232
 awaiting maintainer response