joeyh at alioth.debian.org
2008-Sep-16 21:14 UTC
[Secure-testing-commits] r9835 - data/CVE
Author: joeyh
Date: 2008-09-16 21:14:14 +0000 (Tue, 16 Sep 2008)
New Revision: 9835
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2008-09-16 21:01:22 UTC (rev 9834)
+++ data/CVE/list 2008-09-16 21:14:14 UTC (rev 9835)
@@ -1,5 +1,5 @@
CVE-2008-4109 [unsafe sigdie function called by signal handler]
- {CVE-2006-5051}
+ {DSA-1638-1 CVE-2006-5051}
- openssh 1:4.6p1-1 (low)
NOTE: The patch backported for CVE-2006-5051 was incorrect and did not
NOTE: fully address the issue. The upstream fix in 4.4p1 was
@@ -31225,7 +31225,7 @@
[etch] - openssh <no-dsa> (Minor issue)
- openssh 1:4.6p1-1 (low)
CVE-2006-5051 (Signal handler race condition in OpenSSH before 4.4 allows
remote ...)
- {DSA-1212 DSA-1189-1}
+ {DSA-1638-1 DSA-1212 DSA-1189-1}
- openssh 1:4.6p1-1 (low)
- openssh-krb5 <removed> (high)
NOTE: From my analysis only openssh with Kerberos support should be vulnerable