Author: joeyh Date: 2009-10-21 21:14:19 +0000 (Wed, 21 Oct 2009) New Revision: 13063 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-10-21 20:51:04 UTC (rev 13062) +++ data/CVE/list 2009-10-21 21:14:19 UTC (rev 13063) @@ -661,7 +661,7 @@ - xen-tools <unfixed> (low; bug #548909) [lenny] - xen-tools <no-dsa> (Minor issue) TODO: request CVE id - NOTE: Maintainer will look into an update for stable + NOTE: Maintainer will look into an update for stable CVE-2009-3446 (SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) ...) NOT-FOR-US: com_mytube component for Joomla! CVE-2009-3445 (Unspecified vulnerability in Code-Crafters Ability Mail Server before ...) @@ -1045,7 +1045,7 @@ CVE-2009-3271 (Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a ...) NOT-FOR-US: Apple Safari on iPhone OS 3.0.1 CVE-2009-3290 (The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the ...) - {DSA-1907-1} + {DSA-1907-1 DTSA-203-1} - linux-2.6 2.6.31-1 (medium) [etch] - linux-2.6 <not-affected> (introduced in 2.6.25) - linux-2.6.24 <not-affected> (introduced in 2.6.25) @@ -2423,8 +2423,7 @@ RESERVED - systemtap <unfixed> (bug filed) [lenny] - systemtap <not-affected> (Affected functionality only added in 1.0) -CVE-2009-2910 [linux-2.6: 64-bit registers leaked to 32-bit processes] - RESERVED +CVE-2009-2910 (arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the ...) - linux-2.6 <unfixed> (medium) - linux-2.6.24 <unfixed> (medium) CVE-2009-2909 (Integer signedness error in the ax25_setsockopt function in ...) @@ -12619,7 +12618,7 @@ - iceweasel <unfixed> (unimportant) NOTE: Browser crashes not treated as security issues CVE-2008-5714 (Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for ...) - {DSA-1907-1} + {DSA-1907-1 DTSA-203-1} - qemu 0.9.1-10 (low; bug #509882) [etch] - qemu <not-affected> (Vulnerable code not present) - kvm 82-1 (low; bug #509997)