Author: jmm Date: 2011-07-05 05:59:04 +0000 (Tue, 05 Jul 2011) New Revision: 16894 Modified: data/CVE/list Log: fixes for linux-2.6 Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-07-04 22:18:16 UTC (rev 16893) +++ data/CVE/list 2011-07-05 05:59:04 UTC (rev 16894) @@ -290,12 +290,12 @@ RESERVED CVE-2011-2518 RESERVED - - linux-2.6 <unfixed> (low) + - linux-2.6 2.6.39-3 (low) [squeeze] - linux-2.6 <not-affected> (Vulnerable code not present) [lenny] - linux-2.6 <not-affected> (Vulnerable code not present) CVE-2011-2517 RESERVED - - linux-2.6 <unfixed> (unimportant) + - linux-2.6 2.6.39-3 (unimportant) [lenny] - linux-2.6 <not-affected> (Vulnerable code not present) NOTE: Requires CAP_NET_ADMIn to exploit CVE-2011-2516 @@ -346,7 +346,7 @@ - linux-2.6 2.6.39-1 (low) CVE-2011-2497 RESERVED - - linux-2.6 <unfixed> + - linux-2.6 2.6.39-3 CVE-2011-2496 RESERVED - linux-2.6 2.6.39-1 (low) @@ -382,7 +382,7 @@ RESERVED - gdk-pixbuf 2.23.3-3.1 (bug #631524) CVE-2011-2484 (The add_del_listener function in kernel/taskstats.c in the Linux ...) - - linux-2.6 <unfixed> (low) + - linux-2.6 2.6.39-3 (low) CVE-2011-2483 [openwall blowfish implementation weakness] RESERVED - libcrypt-eksblowfish-perl <not-affected> (discovered and corrected in initial release in 2007) @@ -981,7 +981,7 @@ NOT-FOR-US: VMware CVE-2011-2213 [kernel: inet_diag: fix inet_diag_bc_audit] RESERVED - - linux-2.6 <unfixed> + - linux-2.6 3.6.39-3 CVE-2011-2212 RESERVED CVE-2011-2207 @@ -1139,7 +1139,7 @@ [squeeze] - linux-2.6 <not-affected> (Introduced in 2.6.39) CVE-2011-2183 [race condition in KSM] RESERVED - - linux-2.6 <unfixed> + - linux-2.6 2.6.39-3 (low) [lenny] - linux-2.6 <not-affected> (Vulnerable code not present) CVE-2011-XXXX [login: tty hijacking possible in "su" via TIOCSTI ioctl] - shadow <unfixed> (bug #628843) @@ -2741,7 +2741,7 @@ - mediawiki <unfixed> CVE-2011-1577 (Heap-based buffer overflow in the is_gpt_valid function in ...) {DSA-2264-1} - - linux-2.6 <unfixed> (low) + - linux-2.6 2.6.39-3 (low) CVE-2011-1576 RESERVED CVE-2011-1575 (The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 ...)