fw at alioth.debian.org
2008-Feb-12 18:15 UTC
[Secure-testing-commits] r8140 - in data: CVE DSA
Author: fw
Date: 2008-02-12 18:15:42 +0000 (Tue, 12 Feb 2008)
New Revision: 8140
Modified:
data/CVE/list
data/DSA/list
Log:
CVE-2008-0010 does not apply to etch after all
Modified: data/CVE/list
==================================================================---
data/CVE/list 2008-02-12 13:19:06 UTC (rev 8139)
+++ data/CVE/list 2008-02-12 18:15:42 UTC (rev 8140)
@@ -2617,9 +2617,11 @@
RESERVED
{DSA-1494-1}
- linux-2.6 <unfixed>
+ [etch] - linux-2.6 <not-affected> (vulnerable code not present)
CVE-2008-0009 [kernel: insecure dereference of memory refs from user space,
local priv escalation]
RESERVED
- linux-2.6 <unfixed>
+ [etch] - linux-2.6 <not-affected> (vulnerable code not present)
CVE-2008-0008 (The pa_drop_root function in PulseAudio 0.9.8, and a certain
0.9.9 ...)
{DSA-1476-1}
- pulseaudio 0.9.9-1
Modified: data/DSA/list
==================================================================---
data/DSA/list 2008-02-12 13:19:06 UTC (rev 8139)
+++ data/DSA/list 2008-02-12 18:15:42 UTC (rev 8140)
@@ -1,5 +1,5 @@
[11 Feb 2008] DSA-1494-1 linux-2.6 - privilege escalation
- {CVE-2008-0010 CVE-2008-0163 CVE-2008-0600}
+ {CVE-2008-0163 CVE-2008-0600}
[etch] - linux-2.6 2.6.18.dfsg.1-18etch1
[10 Feb 2008] DSA-1493-1 sdl-image1.2
{CVE-2007-6697 CVE-2008-0544}