Secure testing commits - Dec 2008 - r10619 - data/CVE

Author: jmm-guest
Date: 2008-12-04 21:24:25 +0000 (Thu, 04 Dec 2008)
New Revision: 10619

Modified:
   data/CVE/list
Log:
new kernel issue
gallery CVEfied


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-04 21:16:01 UTC (rev 10618)
+++ data/CVE/list	2008-12-04 21:24:25 UTC (rev 10619)
@@ -47,9 +47,10 @@
 	- dovecot 1:1.0.15-2.3 (bug #506031)
 CVE-2008-5300 (Linux kernel 2.6.28 allows local users to cause a denial of
service ...)
 	{DSA-1681-1}
-	TODO: check
+        - linux-2.6 2.6.26-12
 CVE-2008-5296 (Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when ...)
-	TODO: check
+	- gallery 1.5.9-1.2 (low; bug #506824)
+	[etch] - gallery <not-affected> (vulnerable code introduced in
1.5.8-svn-b34)
 CVE-2008-5295 (SQL injection vulnerability in index.php in Jamit Job Board
3.4.10 ...)
 	NOT-FOR-US: Jamit Job Board 
 CVE-2008-5294 (SQL injection vulnerability in index.php in WebStudio eCatalogue
...)
@@ -242,9 +243,6 @@
 	NOT-FOR-US: Admidio
 CVE-2008-5208 (SQL injection vulnerability in sub_votepic.php in the
Datsogallery ...)
 	NOT-FOR-US:  Datsogallery joomla module
-CVE-2008-XXXX [gallery: cookie handling security bypass vulnerability]
-	- gallery 1.5.9-1.2 (low; bug #506824)
-	[etch] - gallery <not-affected> (vulnerable code introduced in
1.5.8-svn-b34)
 CVE-2008-5207 (Multiple directory traversal vulnerabilities in Jonascms 1.2
allow ...)
 	NOT-FOR-US: Jonascms
 CVE-2008-5206 (PHP remote file inclusion vulnerability in
modules/mod_mainmenu.php in ...)