Author: nion
Date: 2007-12-17 21:11:43 +0000 (Mon, 17 Dec 2007)
New Revision: 7643
Modified:
data/CVE/list
Log:
incorporating fixed linux-2.6 versions reported by Maximilian Attems
Modified: data/CVE/list
==================================================================---
data/CVE/list 2007-12-17 20:44:24 UTC (rev 7642)
+++ data/CVE/list 2007-12-17 21:11:43 UTC (rev 7643)
@@ -641,7 +641,7 @@
CVE-2007-6064
RESERVED
CVE-2007-6063 (Buffer overflow in the isdn_net_setcfg function in isdn_net.c in
Linux ...)
- - linux-2.6 <unfixed>
+ - linux-2.6 2.6.23-2
NOTE: kernel-sec is aware of this
CVE-2007-6062 (irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to
cause ...)
- ngircd 0.10.3-1 (bug #451875)
@@ -2664,7 +2664,7 @@
NOTE:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=96a2d41a3e495734b63bff4e5dd0112741b93b38
CVE-2007-5500 (The wait_task_stopped function in the Linux kernel before
2.6.23.8 ...)
{DSA-1428-1}
- - linux-2.6 2.6.23-1
+ - linux-2.6 2.6.23-2
NOTE: kernel-sec is already tracking this
CVE-2007-5499
REJECTED
@@ -4130,7 +4130,7 @@
RESERVED
CVE-2007-4997 (Integer underflow in the ieee80211_rx function in ...)
{DSA-1428-1}
- - linux-2.6 <unfixed>
+ - linux-2.6 2.6.23-1
CVE-2007-4996 (libpurple in Pidgin before 2.2.1 does not properly handle MSN
nudge ...)
- pidgin 2.2.1-1 (medium)
NOTE: Gaim not affected, vulnerable code was introduced in 2.2.0
@@ -7068,7 +7068,7 @@
- linux-2.6 <unfixed>
CVE-2007-3739 (mm/mmap.c in the hugetlb kernel, when run on PowerPC systems,
does not ...)
{DSA-1378-2 DSA-1378-1}
- - linux-2.6 <unfixed>
+ - linux-2.6 2.6.20-1
CVE-2007-3738 (Multiple unspecified vulnerabilities in Mozilla Firefox before
2.0.0.5 ...)
{DSA-1339-1 DSA-1338-1 DSA-1337-1 DTSA-45-1 DTSA-47-1 DTSA-51-1}
- iceape 1.1.3-1 (medium)
@@ -10108,7 +10108,7 @@
NOTE: could just as well hang-up
NOTE: http://ftp.digium.com/pub/asa/ASA-2007-013.html
CVE-2007-2480 (The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel
...)
- - linux-2.6 <unfixed> (medium)
+ - linux-2.6 2.6.22-1 (medium)
CVE-2007-2479 (Cerulean Studios Trillian Pro before 3.1.5.1 allows remote
attackers ...)
NOT-FOR-US: Cerulean Trillian
CVE-2007-2478 (Multiple heap-based buffer overflows in the IRC component in
Cerulean ...)
@@ -11862,7 +11862,7 @@
CVE-2007-1731 (Multiple stack-based buffer overflows in High Performance
Anonymous ...)
NOT-FOR-US: hpaftpd
CVE-2007-1730 (Integer signedness error in the DCCP support in the
do_dccp_getsockopt ...)
- - linux-2.6 <unfixed> (medium)
+ - linux-2.6 2.6.21-1 (medium)
[etch] - linux-2.6 <not-affected> (Vulnerable code not present)
CVE-2007-1729 (SQL injection vulnerability in includes/start.php in Flexbb
1.0.0 ...)
NOT-FOR-US: Flexbb
@@ -12454,7 +12454,7 @@
- linux-2.6 2.6.20-1 (medium)
CVE-2007-1496 (nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3
allows ...)
{DSA-1289-1}
- - linux-2.6 <unfixed> (medium)
+ - linux-2.6 2.6.21-1 (medium)
CVE-2007-1495 (The \Device\SymEvent driver in Symantec Norton Personal Firewall
2006 ...)
NOT-FOR-US: Symantec Norton Personal Firewall
CVE-2007-1494 (Cross-site scripting (XSS) vulnerability in NukeSentinel before
2.5.06 ...)
@@ -12822,7 +12822,7 @@
NOT-FOR-US: JBoss Application Server
CVE-2007-1353 (The setsockopt function in the L2CAP and HCI Bluetooth support
in the ...)
{DSA-1356-1}
- - linux-2.6 <unfixed> (low)
+ - linux-2.6 2.6.22-1 (low)
CVE-2007-1352 (Integer overflow in the FontFileInitTable function in X.Org
libXfont ...)
{DSA-1294-1}
- libxfont 1:1.2.2-2 (medium)
@@ -17889,7 +17889,7 @@
CVE-2006-6334 (Heap-based buffer overflow in the SendChannelData function in
wfica.ocx in ...)
NOT-FOR-US: Citrix Presentation Server Client
CVE-2006-6333 (The tr_rx function in ibmtr.c for Linux kernel 2.6.19 assigns
the ...)
- - linux-2.6 <unfixed>
+ - linux-2.6 2.6.20-1
[etch] - linux-2.6 <not-affected> (Only affects 2.6.19, introduced after
2.6.18)
CVE-2006-6332 (Stack-based buffer overflow in net80211/ieee80211_wireless.c in
...)
- madwifi 1:0.9.2+r1842.20061207-2 (high; bug #402836; bug #402111)
@@ -19153,7 +19153,7 @@
- linux-2.6 <not-affected> (Fixed before initial upload; 2.6.10)
CVE-2006-5753 (Unspecified vulnerability in the listxattr system call in Linux
...)
{DSA-1356-1 DSA-1304}
- - linux-2.6 <unfixed>
+ - linux-2.6 2.6.20-1
CVE-2006-5752 (Cross-site scripting (XSS) vulnerability in mod_status.c in the
...)
- apache2 2.2.4-2 (low)
[sarge] - apache2 2.0.54-5sarge2