Author: nion Date: 2007-12-05 00:49:02 +0000 (Wed, 05 Dec 2007) New Revision: 7507 Modified: data/CVE/list Log: CVE-2007-5501, CVE-2007-5500 fixed in linux-2.6 2.6.23-1 Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-12-04 23:31:24 UTC (rev 7506) +++ data/CVE/list 2007-12-05 00:49:02 UTC (rev 7507) @@ -2284,11 +2284,11 @@ CVE-2007-5502 (The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does ...) NOT-FOR-US: OpenSSL Fips object module CVE-2007-5501 (The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux ...) - - linux-2.6 <unfixed> (high) + - linux-2.6 2.6.23-1 (high) [etch] - linux-2.6 <not-affected> (Vulnerable code was introduced in 2.6.21) NOTE: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=96a2d41a3e495734b63bff4e5dd0112741b93b38 CVE-2007-5500 (The wait_task_stopped function in the Linux kernel before 2.6.23.8 ...) - - linux-2.6 <unfixed> + - linux-2.6 2.6.23-1 NOTE: kernel-sec is already tracking this CVE-2007-5499 REJECTED