joeyh at alioth.debian.org
2008-Jun-27 09:14 UTC
[Secure-testing-commits] r9178 - data/CVE
Author: joeyh Date: 2008-06-27 09:14:09 +0000 (Fri, 27 Jun 2008) New Revision: 9178 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-06-27 08:19:57 UTC (rev 9177) +++ data/CVE/list 2008-06-27 09:14:09 UTC (rev 9178) @@ -37,7 +37,7 @@ RESERVED - linux-2.6 <unfixed> - linux-2.6.24 <unfixed> - NOTE: 735ce972fbc8a65fb17788debd7bbe7b4383cc62 + NOTE: 735ce972fbc8a65fb17788debd7bbe7b4383cc62 CVE-2008-2825 (Cross-site scripting (XSS) vulnerability in the embedded Web Server in ...) NOT-FOR-US: Xerox WorkCentre CVE-2008-2824 (Unspecified vulnerability in the Extensible Interface Platform in Web ...) @@ -1001,9 +1001,9 @@ CVE-2008-2372 [vm resource starvation local DoS] RESERVED - linux-2.6 <unfixed> - [etch] - linux-2.6 <not-affected> (Introduced between 2.6.23 and 2.6.24) + [etch] - linux-2.6 <not-affected> (Introduced between 2.6.23 and 2.6.24) - linux-2.6.24 <unfixed> - NOTE: 89f5b7da2a6bad2e84670422ab8192382a5aeb9f + NOTE: 89f5b7da2a6bad2e84670422ab8192382a5aeb9f CVE-2008-2371 RESERVED CVE-2008-2370 @@ -1020,8 +1020,8 @@ RESERVED - linux-2.6 <unfixed> - linux-2.6.24 <unfixed> - NOTE: 5ecfbae093f0c37311e89b29bfc0c9d586eace87 f5b40e363ad6041a96e3da32281d8faa191597b9 - NOTE: f358166a9405e4f1d8e50d8f415c26d95505b6de + NOTE: 5ecfbae093f0c37311e89b29bfc0c9d586eace87 f5b40e363ad6041a96e3da32281d8faa191597b9 + NOTE: f358166a9405e4f1d8e50d8f415c26d95505b6de CVE-2008-2364 (The ap_proxy_http_process_response function in mod_proxy_http.c in the ...) - apache2 2.2.9-1 (low) TODO: check apache 1.3 @@ -1043,7 +1043,7 @@ CVE-2008-2358 (The Datagram Congestion Control Protocol (DCCP) subsystem in the Linux ...) {DSA-1592-1} - linux-2.6 2.6.20-1 - NOTE: DCCP feature sanitising was introduced in 2.6.20 + NOTE: DCCP feature sanitising was introduced in 2.6.20 NOTE: this version casts sizeof to int. This is a module, not a compiled in feature in Debian CVE-2008-2357 (Stack-based buffer overflow in the split_redraw function in split.c in ...) {DSA-1587-1}