Secure testing commits - Jun 2007 - r6058 - data/CVE

Author: stef-guest
Date: 2007-06-25 20:18:17 +0000 (Mon, 25 Jun 2007)
New Revision: 6058

Modified:
   data/CVE/list
Log:
fixed: linux, new wireshark issues

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-06-25 07:35:56 UTC (rev 6057)
+++ data/CVE/list	2007-06-25 20:18:17 UTC (rev 6058)
@@ -1,3 +1,5 @@
+CVE-2007-XXXX [multiple wireshark issues]
+	- wireshark 0.99.6pre1-1
 CVE-2007-XXXX [jailer unsave tempfile usage]
 	- jailer 0.4-10 (bug #410548)
 CVE-2007-3372 [avahi assert() local machine DoS]
@@ -1074,9 +1076,9 @@
 CVE-2007-2877 (Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) before
8.5a6 ...)
 	NOTE: Not a security issue; Windows-only anyway.
 CVE-2007-2876 (The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2)
...)
-	- linux-2.6 <unfixed> (medium)
+	- linux-2.6 2.6.21-5 (medium)
 CVE-2007-2875 (Integer underflow in the cpuset_tasks_read function in the Linux
...)
-	- linux-2.6 <unfixed> (medium)
+	- linux-2.6 2.6.21-5 (medium)
 CVE-2007-2874
 	RESERVED
 CVE-2007-2873 (SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when
running as ...)
@@ -2032,7 +2034,7 @@
 CVE-2007-2454 (Heap-based buffer overflow in the VGA device in Parallels allows
local ...)
 	NOT-FOR-US: Parallels
 CVE-2007-2453 (The random number feature in Linux kernel 2.6 before 2.6.20.13,
and ...)
-	- linux-2.6 <unfixed> (low)
+	- linux-2.6 2.6.21-5 (low)
 CVE-2007-2452 (Heap-based buffer overflow in the visit_old_format function in
...)
 	- findutils 4.2.31-1 (low; bug #426862)
 	[sarge] - findutils <no-dsa> (Not vulnerable in default configuration,
minor issue)