joeyh at alioth.debian.org
2009-Mar-31 09:14 UTC
[Secure-testing-commits] r11502 - data/CVE
Author: joeyh Date: 2009-03-31 09:14:11 +0000 (Tue, 31 Mar 2009) New Revision: 11502 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-03-31 04:14:07 UTC (rev 11501) +++ data/CVE/list 2009-03-31 09:14:11 UTC (rev 11502) @@ -112,6 +112,7 @@ NOT-FOR-US: phpKF-Portal CVE-2009-1073 RESERVED + {DSA-1758-1} CVE-2009-1072 (nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD ...) - linux-2.6 2.6.29-1 - linux-2.6.24 <unfixed> @@ -933,6 +934,7 @@ RESERVED CVE-2009-0790 [strongswan/openswan: denial of service via malicious packet can crash the Pluto daemon] RESERVED + {DSA-1760-1 DSA-1759-1} - openswan <unfixed> (medium; bug #521949) - strongswan <unfixed> (medium; bug #521950) CVE-2009-0789 @@ -946,7 +948,8 @@ RESERVED CVE-2009-0785 RESERVED -CVE-2009-0784 (Race condition in the stap tool shipped by Systemtap ...) +CVE-2009-0784 + RESERVED {DSA-1755-1} - systemtap 0.0.20090314-2 CVE-2009-0783 @@ -7917,6 +7920,7 @@ [lenny] - emacspeak 26.0-3+lenny1 [etch] - emacspeak <no-dsa> (Minor issue) CVE-2008-4190 (The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x ...) + {DSA-1760-1} - openswan 1:2.4.12+dfsg-1.3 (bug #496374; low) [etch] - openswan <no-dsa> (Vulnerable code only in example script) CVE-2008-XXXX [jumpnbump: insecure temp file]