[Secure-testing-commits] r17172 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2011-09-05 19:54:45 +0000 (Mon, 05 Sep 2011)
New Revision: 17172

Modified:
   data/CVE/list
Log:
kernel-sec sync

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-09-05 09:14:19 UTC (rev 17171)
+++ data/CVE/list	2011-09-05 19:54:45 UTC (rev 17172)
@@ -1088,6 +1088,7 @@
 CVE-2011-2898
 	RESERVED
 	- linux-2.6 3.0.0-1
+	[lenny] - linux-2.6 <not-affected> (introduced in 2.6.27)
 CVE-2011-2897
 	RESERVED
 CVE-2011-2896 (The LZW decompressor in the LWZReadByte function in giftoppm.c in the ...)
@@ -1648,6 +1649,8 @@
 	- libpng 1.2.46-1 (high; bug #633871)
 CVE-2011-2689 (The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel ...)
 	- linux-2.6 3.0.0-1
+	[squeeze] - linux-2.6 <not-affected> (gfs didn't have fallocate support until 2.6.37)
+	[lenny] - linux-2.6 <not-affected> (gfs didn't have fallocate support until 2.6.37)
 CVE-2011-2688 (SQL injection vulnerability in mysql/mysql-auth.pl in the ...)
 	{DSA-2279-1}
 	- libapache2-mod-authnz-external 3.2.4-2.1 (medium; bug #633637)
@@ -2152,6 +2155,8 @@
 CVE-2011-2498
 	RESERVED
 	- linux-2.6 2.6.39-1 (low)
+	[squeeze] - linux-2.6 <not-affected> (introduced in 2.6.36)
+	[lenny] - linux-2.6 <not-affected> (introduced in 2.6.36)
 CVE-2011-2497 (Integer underflow in the l2cap_config_req function in ...)
 	- linux-2.6 2.6.39-3
 CVE-2011-2496
@@ -2166,6 +2171,8 @@
 CVE-2011-2493
 	RESERVED
 	- linux-2.6 2.6.39-1 (low)
+	[squeeze] - linux-2.6 <not-affected> (sbi->s_err-report didn't exist yet)
+	[lenny] - linux-2.6 <not-affected> (sbi->s_err-report didn't exist yet)
 CVE-2011-2492 (The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not ...)
 	- linux-2.6 3.0.0-1 (low)
 CVE-2011-2491
@@ -3011,6 +3018,7 @@
 	RESERVED
 	{DSA-2264-1}
 	- linux-2.6 2.6.39-2
+	[squeeze] - linux-2.6 2.6.32-35
 CVE-2011-2179 (Multiple cross-site scripting (XSS) vulnerabilities in config.c in ...)
 	- nagios3 3.2.3-3 (bug #629127)
 	[lenny] - nagios3 <not-affected> (Affected feature got introduced in 3.2.2)
@@ -4115,6 +4123,8 @@
 CVE-2011-1768
 	RESERVED
 	{DSA-2264-1}
+	- linux-2.6 2.6.34-1
+	[squeeze] - linux-2.6 2.6.32-35
 CVE-2011-1767
 	RESERVED
 	{DSA-2264-1 DSA-2240-1}
@@ -4177,7 +4187,7 @@
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=697975
 CVE-2011-1748 (The raw_release function in net/can/raw.c in the Linux kernel before ...)
 	{DSA-2264-1 DSA-2240-1}
-	- linux-2.6 <unfixed>
+	- linux-2.6 2.6.39-1 
 CVE-2011-1747 (The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not ...)
 	- linux-2.6 <unfixed> (low)
 CVE-2011-1746 (Multiple integer overflows in the (1) agp_allocate_memory and (2) ...)
@@ -4585,6 +4595,7 @@
 CVE-2011-1577 (Heap-based buffer overflow in the is_gpt_valid function in ...)
 	{DSA-2264-1}
 	- linux-2.6 2.6.39-3 (low)
+	[squeeze] - linux-2.6 2.6.32-35
 CVE-2011-1576
 	RESERVED
 CVE-2011-1575 (The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 ...)