[Secure-testing-commits] r165 - sarge-checks/CVE

Joey Hess joeyh@haydn.debian.org
Fri, 03 Dec 2004 13:18:26 -0700


Author: joeyh
Date: 2004-12-03 13:17:47 -0700 (Fri, 03 Dec 2004)
New Revision: 165

Added:
   sarge-checks/CVE/Makefile
Modified:
   sarge-checks/CVE/list
Log:
automatic updates and makefile
DSA link reformat


Added: sarge-checks/CVE/Makefile
===================================================================
--- sarge-checks/CVE/Makefile	2004-12-03 20:14:13 UTC (rev 164)
+++ sarge-checks/CVE/Makefile	2004-12-03 20:17:47 UTC (rev 165)
@@ -0,0 +1,5 @@
+update:
+	rm -f full-cve.html
+	wget --quiet http://www.cve.mitre.org/cve/downloads/full-cve.html
+	../update.pl full-cve.html ../DSA/list list > list.new
+	mv -f list.new list

Modified: sarge-checks/CVE/list
===================================================================
--- sarge-checks/CVE/list	2004-12-03 20:14:13 UTC (rev 164)
+++ sarge-checks/CVE/list	2004-12-03 20:17:47 UTC (rev 165)
@@ -1,5 +1,4 @@
 begin claimed by wart
-
 CVE-2004-0356
 	NOTE: not-for-us (windows mta)
 CVE-2004-0347
@@ -42,14 +41,14 @@
 CVE-2004-0190
 	NOTE: not-for-us (symantec)
 CVE-2004-0189
-	NOTE: covered by DSA-474
+	{DSA-474}
 CVE-2004-0188
-	NOTE: covered by DSA-461
+	{DSA-461}
 CVE-2004-0186
-	NOTE: covered by DSA-463
+	{DSA-463}
 CVE-2004-0185
+	{DSA-457}
 	- wu-ftpd 2.6.2-17.2
-	NOTE: covered by DSA-457
 CVE-2004-0173
 	NOTE: not-for-us (apache/cygwin)
 CVE-2004-0171
@@ -61,14 +60,14 @@
 CVE-2004-0165
 	NOTE: not-for-us (os x)
 CVE-2004-0160
-	NOTE: covered by DSA-446
+	{DSA-446}
 CVE-2004-0159
-	NOTE: covered by DSA-447
+	{DSA-447}
 CVE-2004-0150
-	NOTE: covered by DSA-458
+	{DSA-458-2 DSA-458}
 CVE-2004-0148
+	{DSA-457}
 	- wu-ftpd 2.6.2-17.2
-	NOTE: covered by DSA-457
 CVE-2004-0131
 	NOTE: not-for-us (gnu radiusd, not in debian)
 CVE-2004-0129
@@ -88,20 +87,19 @@
 CVE-2004-0113
 	- apache2 2.0.52
 CVE-2004-0111
-	NOTE: covered by DSA-464
+	{DSA-464}
 CVE-2004-0108
-	NOTE: covered by DSA-460
+	{DSA-460}
 CVE-2004-0099
 	NOTE: not-for-us (freebsd)
 CVE-2004-0096
 	- libapache-mod-python 2:2.7.10
-	NOTE: covered by DSA-452
 CVE-2004-0095
 	NOTE: not-for-us (mcafee)
 CVE-2004-0094
-	NOTE: covered by DSA-443
+	{DSA-443}
 CVE-2004-0093
-	NOTE: covered by DSA-443
+	{DSA-443}
 CVE-2004-0089
 	NOTE: not-for-us (os x)
 CVE-2004-0082
@@ -113,7 +111,7 @@
 	mutt 1.5.6-20040722+1
 	TODO: test
 CVE-2004-0077
-	NOTE: covered by DSA-438
+	{DSA-514 DSA-475 DSA-470 DSA-466 DSA-456 DSA-454 DSA-453 DSA-450 DSA-444 DSA-442 DSA-441 DSA-440 DSA-439 DSA-438}
 CVE-2004-0075
 	kernel-source-2.4.24 2.4.24-3
 	TODO: test
@@ -143,15 +141,15 @@
 CVE-2004-0031
 	NOTE: not-for-us (phpgedview, not in debian)
 CVE-2004-0028
-	NOTE: covered by DSA-420
+	{DSA-420}
 CVE-2004-0016
-	NOTE: covered by DSA-419
+	{DSA-419}
 CVE-2004-0015
-	NOTE: covered by DSA-418
+	{DSA-418}
 CVE-2004-0013
-	NOTE: covered by DSA-414
+	{DSA-414}
 CVE-2004-0011
-	NOTE: covered by DSA-416
+	{DSA-416}
 CVE-2004-0009
 	apache-ssl 1.3.31
 	TODO: test
@@ -161,38 +159,36 @@
 	kernel-image-2.6.8-9-amd64-generic
 	HELP: what version?
 	TODO: test?
-
 end claimed by wart
-
 CVE-2003-1328
 	NOTE: not-for-us (windows)
 CVE-2003-1326
 	NOTE: not-for-us (windows)
 CVE-2003-1022
+	{DSA-416}
 	- fsp 2.81.b18-1
-	NOTE: covered by DSA-416
 CVE-2003-0994
 	NOTE: not-for-us (norton)
 CVE-2003-0993
 	- apache 1.3.29.0.2-4
 CVE-2003-0991
+	{DSA-436}
 	- mailman 2.1-1
-	NOTE: covered by DSA-436
 	NOTE: I have mailed Tollef Fog Heen <tfheen@debian.org> about this. 
 	NOTE: Tollef Fog Heen reply to me that 2.1 versions are not vulnerable
 CVE-2003-0988
 	- kdepim 3.1.5-1
 CVE-2003-0985
+	{DSA-475 DSA-470 DSA-450 DSA-442 DSA-440 DSA-439 DSA-427 DSA-423 DSA-417 DSA-413}
 	NOTE: fixed in 2.4.24-rc1
-	NOTE: covered by DSA-413
 CVE-2003-0969
+	{DSA-411}
 	- mpg321 0.2.10.3
-	NOTE: covered by DSA-411
 CVE-2003-0966
 	NOTE: not-for-us (elm)
 CVE-2003-0924
+	{DSA-426}
 	- netpbm-free 2:9.25-9
-	NOTE: covered by DSA-426
 CVE-2003-0905
 	NOTE: not-for-us (microsoft)
 CVE-2003-0903
@@ -200,11 +196,11 @@
 CVE-2003-0825
 	NOTE: not-for-us (microsoft)
 CVE-2003-0145
+	{DSA-261}
 	- tcpdump 3.7.2-1
-	NOTE: covered by DSA-261
 CVE-2003-0143
+	{DSA-259}
 	- qpopper 4.0.4-9
-	NOTE: covered by DSA-259
 CVE-2003-0125
 	NOTE: not-for-us (SOHO Routefinder)
 CVE-2003-0124
@@ -214,11 +210,11 @@
 CVE-2003-0122
 	NOTE: not-for-us (lotus notes)
 CVE-2003-0120
+	{DSA-256}
 	- mhc 0.25+20030224-1
-	NOTE: covered by DSA-256
 CVE-2003-0108
+	{DSA-255}
 	- tcpdump 3.7.1-1.2
-	NOTE: covered by DSA-255
 CVE-2003-0107
 	- zlib 1.1.4-10	
 CVE-2003-0104
@@ -226,8 +222,8 @@
 CVE-2003-0103
 	NOTE: not-for-us (nokia handset)
 CVE-2003-0102
+	{DSA-260}
 	- file 3.40-1.1
-	NOTE: covered by DSA-260
 CVE-2003-0100
 	NOTE: not-for-us (cisco)
 CVE-2003-0097
@@ -237,37 +233,37 @@
 CVE-2003-0094
 	NOTE: not-for-us (mandrake specific)
 CVE-2003-0093
+	{DSA-261}
 	- tcpdump 3.7.1-1
-	NOTE: covered by DSA-261
 CVE-2003-0088
 	NOTE: not-for-us (macosX)
 CVE-2003-0087
 	NOTE: not-for-us (AIX)
 CVE-2003-0081
+	{DSA-258}
 	- ethereal 0.9.9-2
-	NOTE: covered by DSA-258
 CVE-2003-0079
 	NOTE: not-for-us (hanterm before 2.0.5)
 CVE-2003-0078
+	{DSA-253}
 	- openssl 0.9.7a-1
-	NOTE: covered by DSA-253
 CVE-2003-0077
 	NOTE: not-for-us (hanterm before 2.0.5)
 CVE-2003-0075
 	NOTE: not-for-us (blade encoder not in Debian)
 CVE-2003-0073
+	{DSA-303}
 	- mysql 4.0.12-2
-	NOTE: covered by DSA-303
 CVE-2003-0071
+	{DSA-380}
 	- xfree86 4.2.1-11
-	NOTE: covered by DSA-380
 CVE-2003-0070
 	- vte 0.11.10-1
 CVE-2003-0069
 	- putty 0.54-1
 CVE-2003-0068
+	{DSA-496}
 	- eterm 0.9.2-6
-	NOTE: covered by DSA-496
 CVE-2003-0067
 	NOTE: I have mailed Göran Weinholt <weinholt@debian.org> about this. 
 	NOTE: Göran Weinholt <weinholt@debian.org> tell me that aterm 0.4.2 was 
@@ -281,8 +277,8 @@
 CVE-2003-0064
 	NOTE: not-for-us (dtterm not in Debian)
 CVE-2003-0063
+	{DSA-380}
 	- xfree86 4.2.1-11
-	NOTE: covered by DSA-380
 CVE-2003-0062
 	NOTE: not-for-us (NOD32 not in Debian)
 CVE-2003-0059
@@ -304,20 +300,20 @@
 CVE-2003-0045
 	NOTE: not-for-us (windows)
 CVE-2003-0043
+	{DSA-246}
 	- tomcat 3.3.1a-1
-	NOTE: covered by DSA-246
 CVE-2003-0040
+	{DSA-247}
 	- courier-ssl 0.40.2-3
-	NOTE: covered by DSA-247
 CVE-2003-0039
+	{DSA-245}
 	- dhcp3 1.1.2-1
-	NOTE: covered by DSA-245
 CVE-2003-0033
+	{DSA-297}
 	- snort 2.0.0-1
-	NOTE: covered by DSA-297
 CVE-2003-0032
+	{DSA-228}
 	- libmcrypt 2.5.5-1
-	NOTE: covered by DSA-228
 CVE-2003-0027
 	NOTE: not-for-us (sun)
 CVE-2003-0024
@@ -338,22 +334,21 @@
 CVE-2003-0019
 	NOTE: not-for-us (redhat 8.0 only)
 CVE-2003-0018
+	{DSA-423 DSA-358}
 	NOTE: fixed after 2.6/2.4.21 kernel
-	NOTE: covered by DSA-358
-	NOTE: covered by DSA-423
 CVE-2003-0017
 	NOTE: not-for-us (apache on windows)
 CVE-2003-0016
 	NOTE: not-for-us (apache on windows)
 CVE-2003-0015
+	{DSA-233}
 	- cvs 1.11.2-5.1
-	NOTE: covered by DSA-233
 CVE-2003-0013
+	{DSA-230}
 	- bugzilla 2.16.2-1
-	NOTE: covered by DSA-230
 CVE-2003-0012
+	{DSA-230}
 	- bugzilla 2.16.2-1
-	NOTE: covered by DSA-230
 CVE-2003-0009
 	NOTE: not-for-us (windows)
 CVE-2003-0007
@@ -449,11 +444,11 @@
 CVE-2002-1479
 	- cacti 0.6.8-1
 CVE-2002-1478
+	{DSA-164}
 	- cacti 0.6.8a-2
-	NOTE: covered by DSA-164
 CVE-2002-1477
+	{DSA-164}
 	- cacti 0.6.8a-2
-	NOTE: covered by DSA-164
 CVE-2002-1476
 	NOTE: not-for-us (NetBSD)
 CVE-2002-1472
@@ -492,11 +487,10 @@
 CVE-2002-1430
 	NOTE: not-for-us (Sympoll not in Debian)
 CVE-2002-1425
+	{DSA-141}
 	- mpack 1.5-9
-	NOTE: covered by DSA-141
 CVE-2002-1424
 	- mpack 1.5-9
-	NOTE: covered by DSA-141
 CVE-2002-1420
 	NOTE: not-for-us (OpenBSD)
 CVE-2002-1419
@@ -510,23 +504,23 @@
 CVE-2002-1413
 	NOTE: not-for-us (RCONAG6 for Novell Netware SP2)
 CVE-2002-1412
+	{DSA-138}
 	- gallery 1.3-3
-	NOTE: covered by DSA-138
 CVE-2002-1407
 	NOTE: not-for-us (TinySSL not in Debian)
 CVE-2002-1405
+	{DSA-210}
 	- lynx 2.8.4.1b-4
-	NOTE: covered by DSA-210
 CVE-2002-1403
+	{DSA-219}
 	- dhcpd 1.3.22pl2-2
-	NOTE: covered by DSA-219
 CVE-2002-1396
 	- php4 4:4.3.2+rc3-1
 	NOTE: according to http://www.securityfocus.com/bid/6488
 	NOTE: woody is not vulnerable
 CVE-2002-1394
+	{DSA-225}
 	- tomcat4 4.1.9-1
-	NOTE: covered by DSA-225
 CVE-2002-1392
 	- mgetty 1.1.30-1
 	NOTE: woody version seems to be vulnerable see bug #199351
@@ -534,27 +528,27 @@
 	- mgetty 1.1.30-1
 	NOTE: woody version seems to be vulnerable see bug #199351
 CVE-2002-1390
+	{DSA-223}
 	- geneweb 4.09-1
-	NOTE: covered by DSA-223
 CVE-2002-1389
+	{DSA-217}
 	- typespeed 0.4.2-2
-	NOTE: covered by DSA-217
 CVE-2002-1388
+	{DSA-221}
 	- mhonarc 2.5.14-1
-	NOTE: covered by DSA-221
 CVE-2002-1385
 	- openwebmail 1.90-1
 CVE-2002-1384
+	{DSA-232 DSA-226 DSA-222}
 	- xpdf 2.01-2
-	NOTE: covered by DSA-222
 CVE-2002-1382
 	- flashplugin-nonfree 6.0.69-1
 CVE-2002-1381
 	- exim4 4.11-0.0.1
 	- exim (unfixed; bug #171774)
 CVE-2002-1380
+	{DSA-336}
 	- kernel-source-2.2.25
-	NOTE: covered by DSA-336
 CVE-2002-1377
 	- vim 6.1.263-1
 	NOTE: woody seems to be still vulnerable
@@ -564,57 +558,57 @@
 	NOTE: No response from maintainer, I have mailed security team.
 	NOTE: Martin Schulze don't consider this as an issue for updating woody.
 CVE-2002-1375
+	{DSA-212}
 	- mysql-dfsg 4.0.7.gamma-1
-	NOTE: covered by DSA-212
 CVE-2002-1374
+	{DSA-212}
 	- mysql-dfsg 4.0.7.gamma-1
-	NOTE: covered by DSA-212
 CVE-2002-1373
+	{DSA-212}
 	- mysql-dfsg 4.0.7.gamma-1
-	NOTE: covered by DSA-212
 CVE-2002-1372
+	{DSA-232}
 	- cupsys 1.1.18-1
-	NOTE: covered by DSA-232
 CVE-2002-1371
+	{DSA-232}
 	- cupsys 1.1.18-1
-	NOTE: covered by DSA-232
 CVE-2002-1369
+	{DSA-232}
 	- cupsys 1.1.18-1
-	NOTE: covered by DSA-232
 CVE-2002-1367
+	{DSA-232}
 	- cupsys 1.1.18-1
-	NOTE: covered by DSA-232
 CVE-2002-1366
+	{DSA-232}
 	- cupsys 1.1.18-1
-	NOTE: covered by DSA-232
 CVE-2002-1365
+	{DSA-216}
 	- fetchmail 6.2.0-1
-	NOTE: covered by DSA-216
 CVE-2002-1364
+	{DSA-254}
 	- traceroute-nanog 6.3.0-1
-	NOTE: covered by DSA-254
 CVE-2002-1363
+	{DSA-213}
 	- libpng 1.0.12-7
 	- libpng3 1.2.5-8
-	NOTE: covered by DSA-213
 CVE-2002-1362
+	{DSA-211}
 	- micq 0.4.9.4-1
 	NOTE: micq not in sarge
-	NOTE: covered by DSA-211
 CVE-2002-1361
 	NOTE: not-for-us (sun)
 CVE-2002-1350
+	{DSA-206}
 	- tcpdump 3.7.1-1.2
-	NOTE: covered by DSA-206
 CVE-2002-1349
 	NOTE: not-for-us (PC-cillin)
 CVE-2002-1348
+	{DSA-251 DSA-250 DSA-249}
 	- w3mmee 0.3.p24.17-3
-	NOTE: covered by DSA-249
 CVE-2002-1337
+	{DSA-257}
 	- sendmail 8.13.0.PreAlpha4-0
 	NOTE: sendmail-wide not in testing/unstable
-	NOTE: covered by DSA-257
 CVE-2002-1336
 	- tightvnc 1.2.6-1
 CVE-2002-1327
@@ -622,29 +616,29 @@
 CVE-2002-1325
 	NOTE: not-for-us (windows)
 CVE-2002-1323
+	{DSA-208}
 	- perl 5.8.0-14
-	NOTE: covered by DSA-208
 CVE-2002-1320
 	NOTE: not-for-us (pine not in Debian)
 CVE-2002-1319
 	NOTE: fixed after 2.4.20 kernel (2.6 not vulnerable)
 CVE-2002-1318
+	{DSA-200}
 	- samba 2.99.cvs.20020713-1
-	NOTE: covered by DSA-200
 CVE-2002-1317
 	NOTE: not-for-us (solaris)
 CVE-2002-1313
+	{DSA-198}
 	- nullmailer 1.00RC5-17
-	NOTE: covered by DSA-198
 CVE-2002-1311
+	{DSA-197}
 	- courier 0.40.0-1
-	NOTE: covered by DSA-197
 CVE-2002-1308
 	- mozilla 2:1.2-1
 	NOTE: woody is vulnerable see #237422
 CVE-2002-1307
+	{DSA-199}
 	- mhonarc 2.5.13-1
-	NOTE: covered by DSA-199
 CVE-2002-1296
 	NOTE: not-for-us (Solaris)
 CVE-2002-1284
@@ -652,13 +646,13 @@
 CVE-2002-1278
 	NOTE: Linuxconf not in testing/unstable
 CVE-2002-1277
+	{DSA-190}
 	- wmaker 0.80.1-1
-	NOTE: covered by DSA-190
 CVE-2002-1272
 	NOTE: not-for-us (Alcatel)
 CVE-2002-1271
+	{DSA-386}
 	- libmailtools-perl 1.51
-	NOTE: covered by DSA-386
 CVE-2002-1270
 	NOTE: not-for-us (Mac OS X)
 CVE-2002-1268
@@ -686,15 +680,15 @@
 CVE-2002-1252
 	NOTE: not-for-us (PeopleSoft)
 CVE-2002-1251
+	{DSA-186}
 	- log2mail 0.2.6-1
-	NOTE: covered by DSA-186
 CVE-2002-1250
 	NOTE: not-for-us (Abuse 2.00 not in Debian)
 CVE-2002-1248
 	NOTE: not-for-us (Xeneo Web Server)
 CVE-2002-1245
+	{DSA-189}
 	- luxman 0.41-19
-	NOTE: covered by DSA-189
 CVE-2002-1244
 	NOTE: not-for-us (Pablo FTP Server)
 CVE-2002-1242
@@ -704,15 +698,15 @@
 CVE-2002-1236
 	NOTE: not-for-us (Linksys)
 CVE-2002-1232
+	{DSA-180}
 	- nis 3.9-6.2
-	NOTE: covered by DSA-180
 CVE-2002-1231
 	NOTE: not-for-us (SCO)
 CVE-2002-1230
 	NOTE: not-for-us (Windows NT)
 CVE-2002-1227
+	{DSA-177}
 	- pam 0.76-6
-	NOTE: covered by DSA-177
 CVE-2002-1224
 	- kdenetwork 4:3.1.0-1
 CVE-2002-1223
@@ -720,21 +714,21 @@
 CVE-2002-1222
 	NOTE: not-for-us (CISCO)
 CVE-2002-1221
+	{DSA-196}
 	- bind 8.3.3-3
-	NOTE: covered by DSA-196
 CVE-2002-1220
+	{DSA-196}
 	- bind 8.3.3-3
-	NOTE: covered by DSA-196
 CVE-2002-1219
+	{DSA-196}
 	- bind 8.3.3-3
-	NOTE: covered by DSA-196
 CVE-2002-1214
 	NOTE: not-for-us (Microsoft)
 CVE-2002-1211
 	NOTE: not-for-us (Prometheus not in Debian)
 CVE-2002-1200
+	{DSA-175}
 	- syslog-ng 1.5.21-1
-	NOTE: covered by DSA-175
 CVE-2002-1199
 	NOTE: not-for-us (ypxfrd not in Debian)
 CVE-2002-1198
@@ -744,15 +738,15 @@
 	bugzilla 2.16.1-1
 	NOTE: woody seems to be vulnerable, bug #282501
 CVE-2002-1196
+	{DSA-173}
 	- bugzilla 2.16.0-2.1
-	NOTE: covered by DSA-173
 CVE-2002-1195
+	{DSA-169}
 	- php3 3.0.18-23.2
 	- php4 4.2.3-3
-	NOTE: covered by DSA-169
 CVE-2002-1193
+	{DSA-172}
 	NOTE: tkmail not in testing/unstable
-	NOTE: covered by DSA-172
 CVE-2002-1189
 	NOTE: not-for-us (CISCO)
 CVE-2002-1188
@@ -782,11 +776,11 @@
 CVE-2002-1160
 	NOTE: not-for-us (pam_xauth)
 CVE-2002-1159
-	NOTE: covered by DSA-224
+	{DSA-224}
 CVE-2002-1158
-	NOTE: covered by DSA-224
+	{DSA-224}
 CVE-2002-1157
-	NOTE: covered by DSA-181
+	{DSA-181}
 CVE-2002-1156
 	- apache2 2.0.43
 CVE-2002-1154
@@ -796,9 +790,9 @@
 CVE-2002-1152
 	- konqeror 3.03
 CVE-2002-1151
-	NOTE: covered by DSA-167
+	{DSA-167}
 CVE-2002-1148
-	NOTE: covered by DSA-170
+	{DSA-170}
 CVE-2002-1147
 	NOTE: not-for-us (HP Procurve 4000M Switch firmware)
 CVE-2002-1146
@@ -821,7 +815,7 @@
 CVE-2002-1135
 	NOTE: not-for-us (phpWebSite)
 CVE-2002-1132
-	NOTE: covered by DSA-191
+	{DSA-191}
 CVE-2002-1126
 	- mozilla 1.2
 CVE-2002-1123
@@ -829,19 +823,19 @@
 CVE-2002-1122
 	NOTE: not-for-us (Microsoft)
 CVE-2002-1119
-	NOTE: covered by DSA-159
+	{DSA-159}
 CVE-2002-1118
 	NOTE: not-for-us (Oracle)
 CVE-2002-1117
 	NOTE: not-for-us (Veritas Backup Exec)
 CVE-2002-1116
-	NOTE: covered by DSA-161
+	{DSA-161}
 CVE-2002-1113
-	NOTE: covered by DSA-153
+	{DSA-153}
 CVE-2002-1112
-	NOTE: covered by DSA-153
+	{DSA-153}
 CVE-2002-1111
-	NOTE: covered by DSA-153
+	{DSA-153}
 CVE-2002-1109
 	NOTE: old amavis shell script
 CVE-2002-1108
@@ -893,11 +887,11 @@
 CVE-2002-1053
 	NOTE: not-for-us (W3C Jigsaw Proxy Server)
 CVE-2002-1051
-	NOTE: covered by DSA-254
+	{DSA-254}
 CVE-2002-1050
-	NOTE: covered by DSA-148
+	{DSA-148}
 CVE-2002-1049
-	NOTE: covered by DSA-148
+	{DSA-148}
 CVE-2002-1046
 	NOTE: not-for-us (Watchguard Firebox firmware)
 CVE-2002-1039
@@ -931,23 +925,23 @@
 CVE-2002-0990
 	NOTE: not-for-us (Symantec)
 CVE-2002-0989
-	NOTE: covered by DSA-158
+	{DSA-158}
 CVE-2002-0988
 	NOTE: not-for-us (Xsco)
 CVE-2002-0987
 	NOTE: not-for-us (Xsco)
 CVE-2002-0986
-	NOTE: covered by DSA-168
+	{DSA-168}
 CVE-2002-0985
-	NOTE: covered by DSA-168
+	{DSA-168}
 CVE-2002-0984
-	NOTE: covered by DSA-156
+	{DSA-156}
 CVE-2002-0981
 	NOTE: not-for-us (ndcfg)
 CVE-2002-0974
 	NOTE: not-for-us (Help and Support Center for Windows XP)
 CVE-2002-0970
-	NOTE: covered by DSA-155
+	{DSA-155}
 CVE-2002-0969
 	NOTE: mysql problem only affects Windows
 CVE-2002-0968
@@ -974,7 +968,7 @@
 	NOTE: not-for-us (Java on Windows)
 CVE-2002-0938
 	NOTE: not-for-us (Cisco)
-CVE-2002-0935	
+CVE-2002-0935
 	- tomcat4 4.1.9-1
 CVE-2002-0916
 	- squid 2.4.7
@@ -1003,13 +997,13 @@
 CVE-2002-0887
 	NOTE: not-for-us (scoadmin)
 CVE-2002-0875
-	NOTE: covered by DSA-154
+	{DSA-154}
 CVE-2002-0873
-	NOTE: covered by DSA-152
+	{DSA-152}
 CVE-2002-0872
-	NOTE: covered by DSA-152
+	{DSA-152}
 CVE-2002-0871
-	NOTE: covered by DSA-151
+	{DSA-151}
 CVE-2002-0867
 	NOTE: not-for-us (Microsoft)
 CVE-2002-0866
@@ -1033,7 +1027,7 @@
 CVE-2002-0848
 	NOTE: not-for-us (Cisco)
 CVE-2002-0847
-	NOTE: covered by DSA-145
+	{DSA-145}
 CVE-2002-0846
 	- flashplugin-nonfree 6.0.47
 CVE-2002-0845
@@ -1044,9 +1038,9 @@
 	NOTE: mod_dav for apache not vulnerable according to
 	NOTE: lists.netsys.com/pipermail/full-disclosure/2003-February/003875.html
 CVE-2002-0840
-	NOTE: covered by DSA-187
+	{DSA-195 DSA-188 DSA-187}
 CVE-2002-0836
-	NOTE: covered by DSA-207
+	{DSA-207}
 CVE-2002-0835
 	NOTE: not-for-us (RedHat/Intel PXE daemon)
 	NOTE: this is not the one in Debian
@@ -1063,9 +1057,9 @@
 CVE-2002-0823
 	NOTE: not-for-us (Windows)
 CVE-2002-0818
-	NOTE: covered by DSA-144
+	{DSA-144}
 CVE-2002-0817
-	NOTE: covered by DSA-139
+	{DSA-139}
 CVE-2002-0816
 	NOTE: not-for-us (HP Tru64)
 CVE-2002-0814
@@ -1131,7 +1125,7 @@
 CVE-2002-0741
 	NOTE: not-for-us (psyBNC)
 CVE-2002-0738
-	NOTE: covered by DSA-163
+	{DSA-163}
 CVE-2002-0737
 	NOTE: not-for-us (Sambar web server)
 CVE-2002-0736
@@ -1186,7 +1180,7 @@
 CVE-2002-0691
 	NOTE: not-for-us (Microsoft)
 CVE-2002-0688
-	NOTE: covered by DSA-490
+	{DSA-490}
 CVE-2002-0687
 	- zope 2.5.1b2
 CVE-2002-0685
@@ -1214,14 +1208,12 @@
 CVE-2002-0663
 	NOTE: not-for-us (Norton)
 CVE-2002-0662
-	NOTE: covered by DSA-160
+	{DSA-160}
 CVE-2002-0658
-	NOTE: covered by DSA-137
+	{DSA-137}
 CVE-2002-0653
-	NOTE: covered by DSA-135
-
-NOTE: This is apporixmatly where woody was released.
-
+	TODO: check
+STOP: This is apporixmatly where woody was released.
 CVE-2002-0651
 CVE-2002-0650
 CVE-2002-0648
@@ -1294,7 +1286,7 @@
 CVE-2002-0435
 CVE-2002-0431
 CVE-2002-0429
-	NOTE: covered by DSA-311
+	{DSA-442 DSA-336 DSA-332 DSA-312 DSA-311}
 CVE-2002-0425
 CVE-2002-0424
 CVE-2002-0423
@@ -1313,14 +1305,14 @@
 CVE-2002-0394
 CVE-2002-0392
 CVE-2002-0391
-	NOTE: covered by DSA-142
+	{DSA-333 DSA-149 DSA-146 DSA-143 DSA-142}
 CVE-2002-0389
 CVE-2002-0387
 CVE-2002-0384
 CVE-2002-0382
 CVE-2002-0381
 CVE-2002-0380
-	NOTE: covered by DSA-255
+	{DSA-255}
 CVE-2002-0379
 CVE-2002-0377
 CVE-2002-0376
@@ -2973,7 +2965,7 @@
 CVE-1999-1335
 CVE-1999-1333
 CVE-1999-1332
-	NOTE: covered by DSA-308
+	{DSA-308}
 CVE-1999-1331
 CVE-1999-1330
 CVE-1999-1329
@@ -3104,7 +3096,7 @@
 CVE-1999-0999
 CVE-1999-0998
 CVE-1999-0997
-	NOTE: covered by DSA-377
+	{DSA-377}
 CVE-1999-0996
 CVE-1999-0995
 CVE-1999-0994
@@ -3330,7 +3322,7 @@
 CVE-1999-0713
 CVE-1999-0711
 CVE-1999-0710
-	NOTE: covered by DSA-576-1
+	{DSA-576-1}
 CVE-1999-0708
 CVE-1999-0707
 CVE-1999-0706