Secure testing commits - Dec 2008 - r10661 - data/CVE

Author: jmm-guest
Date: 2008-12-08 23:17:08 +0000 (Mon, 08 Dec 2008)
New Revision: 10661

Modified:
   data/CVE/list
Log:
- new kernel issue
- wireshark fixed in sid


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-08 23:16:11 UTC (rev 10660)
+++ data/CVE/list	2008-12-08 23:17:08 UTC (rev 10661)
@@ -646,8 +646,11 @@
 CVE-2008-5080 (awstats.pl in AWStats 6.8 and earlier does not properly remove
quote ...)
 	{DSA-1679-1}
 	- awstats <unfixed> (bug #495432; low)
-CVE-2008-5079
+CVE-2008-5079 [kernel ATM DoS]
 	RESERVED
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <unfixed>
+	NOTE: http://marc.info/?l=linux-netdev&m=122841256115780&w=2
 CVE-2008-5078
 	RESERVED
 CVE-2008-5077
@@ -1533,26 +1536,26 @@
 	- mantis 1.1.2+dfsg-9 (low; bug #503588)
 CVE-2008-4685 (Use-after-free vulnerability in the dissect_q931_cause_ie
function in ...)
 	{DSA-1673-1}
-	- wireshark <unfixed> (low; bug #503589)
+	- wireshark 1.0.4-1 (low; bug #503589)
 	[lenny] - wireshark 1.0.2-3+lenny2
 CVE-2008-4684 (packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly
...)
 	{DSA-1673-1}
-	- wireshark <unfixed> (low; bug #503589)
+	- wireshark 1.0.4-1 (low; bug #503589)
 	[lenny] - wireshark 1.0.2-3+lenny2
 CVE-2008-4683 (The dissect_btacl function in packet-bthci_acl.c in the
Bluetooth ACL ...)
 	{DSA-1673-1}
-	- wireshark <unfixed> (low; bug #503589)
+	- wireshark 1.0.4-1 (low; bug #503589)
 	[lenny] - wireshark 1.0.2-3+lenny2
 CVE-2008-4682 (wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers
to ...)
-	- wireshark <unfixed> (low; bug #503589)
+	- wireshark 1.0.4-1 (low; bug #503589)
 	[etch] - wireshark <not-affected> (Vulnerable code not present,
introduced in 0.99.7)
 	[lenny] - wireshark 1.0.2-3+lenny2
 CVE-2008-4681 (Unspecified vulnerability in the Bluetooth RFCOMM dissector in
...)
-	- wireshark <unfixed> (low; bug #503589)
+	- wireshark 1.0.4-1 (low; bug #503589)
 	[etch] - wireshark <not-affected> (Vulnerable code not present,
introduced in 0.99.7)
 	[lenny] - wireshark 1.0.2-3+lenny2
 CVE-2008-4680 (packet-usb.c in the USB dissector in Wireshark 0.99.7 through
1.0.3 ...)
-	- wireshark <unfixed> (low; bug #503589)
+	- wireshark 1.0.4-1 (low; bug #503589)
 	[etch] - wireshark <not-affected> (Vulnerable code not present,
introduced in 0.99.7)
 	[lenny] - wireshark 1.0.2-3+lenny2
 CVE-2008-4679 (The Web Services Security component in IBM WebSphere Application
...)