[Secure-testing-team] [Secure-testing-commits] r13027 - data/CVE

[Michael Gilbert]

On Fri, 16 Oct 2009 04:43:20 +0000, Florian Weimer wrote:
> Author: fw
> Date: 2009-10-16 04:43:18 +0000 (Fri, 16 Oct 2009)
> New Revision: 13027
> 
> Modified:
>    data/CVE/list
> Log:
> CVE-2009-3613: add reference
> 
> 
> Modified: data/CVE/list
> ===================================================================
> --- data/CVE/list	2009-10-15 23:26:23 UTC (rev 13026)
> +++ data/CVE/list	2009-10-16 04:43:18 UTC (rev 13027)
> @@ -182,6 +182,7 @@
>  	RESERVED
>  	- linux-2.6 2.6.29-1 (medium)
>  	- linux-2.6.24 <removed>
> +	NOTE: http://www.openwall.com/lists/oss-security/2009/10/15/4

fyi, the kernel-sec team tracks the full details of known kernel issues
(svn.debian.org/svn/kernel-sec), so all we do is note affected
versions (primarily so debsecan and the web tracker output correct
info). kernel-sec is already tracking cve-2009-3613.

it would be nice if we could merge, but Dann Frazier has specific needs
for "pending" tracking that the current tracker does not provide.

mike