Author: jmm-guest Date: 2006-01-03 15:58:32 +0000 (Tue, 03 Jan 2006) New Revision: 3214 Modified: data/CVE/list Log: new kernel information leak Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-01-03 12:07:21 UTC (rev 3213) +++ data/CVE/list 2006-01-03 15:58:32 UTC (rev 3214) @@ -1,3 +1,7 @@ +CVE-2005-4605 [kernel procfs information leak] + - linux-2.6 <unfixed> + - kernel-source-2.4.27 <not-affected> (2.4''s proc_file_lseek contains a sanity check) + NOTE: Sarge 2.6.8 status yet unclear CVE-2005-XXXX [xshisen follows symlinks for shared gid games files] - xshisen 1.51-1-1.2 (bug #291613) CVE-2006-0062 [Potential xlockmore bypass]