[Secure-testing-commits] r73 - in sarge-checks: CAN DSA
Joey Hess
joeyh@haydn.debian.org
Thu, 04 Nov 2004 11:16:24 -0700
Author: joeyh
Date: 2004-11-04 11:16:16 -0700 (Thu, 04 Nov 2004)
New Revision: 73
Modified:
sarge-checks/CAN/list
sarge-checks/DSA/list
Log:
newest batch of CANs and a DSA
Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list 2004-11-03 21:53:25 UTC (rev 72)
+++ sarge-checks/CAN/list 2004-11-04 18:16:16 UTC (rev 73)
@@ -1,3 +1,40 @@
+CAN-2004-1008
+ NOTE: reserved
+CAN-2004-1007
+ - bogofilter 0.92.8-1
+CAN-2004-1006
+ NOTE: reserved
+ NOTE: covered by DSA-584-1
+CAN-2004-1005
+ NOTE: reserved
+CAN-2004-1004
+ NOTE: reserved
+CAN-2004-1003
+ NOTE: not-for-us (Trend ScanMail)
+CAN-2004-1002
+ - ppp 2.4.2+20040428-3
+CAN-2004-1001
+ - shadow 1:4.0.3-30.3
+CAN-2004-1000
+ NOTE: reserved
+CAN-2004-0999
+ NOTE: reserved
+CAN-2004-0998
+ NOTE: reserved
+CAN-2004-0997
+ NOTE: reserved
+CAN-2004-0996
+ NOTE: reserved
+CAN-2004-0995
+ NOTE: reserved
+CAN-2004-0994
+ NOTE: reserved
+CAN-2004-0993
+ NOTE: reserved
+CAN-2004-0992
+ NOTE: reserved
+CAN-2004-0991
+ NOTE: reserved
CAN-2004-0990
TODO: probably vulnerable, check libgd1 and libgd2 and file bugs
CAN-2004-0989
@@ -42,7 +79,6 @@
CAN-2004-0970 [local; medium]
NOTE: bug #278277 closed because scripts are set -C
NOTE: bug #279208 opened by Joey Schulze
- NOTE: security team, make up your minds ;-)
CAN-2004-0969 [local; medium]
- groff 1.18.1.1-2
CAN-2004-0968 [local; medium]
Modified: sarge-checks/DSA/list
===================================================================
--- sarge-checks/DSA/list 2004-11-03 21:53:25 UTC (rev 72)
+++ sarge-checks/DSA/list 2004-11-04 18:16:16 UTC (rev 73)
@@ -1,3 +1,6 @@
+[04 Nov 2004] DSA-584-1 dhcp - format string vulnerability
+ {CAN-2004-1006}
+ - dhcp 2.0pl5-19.1
[03 Nov 2004] DSA-583-1 lvm10 - insecure temporary directory
{CAN-2004-0972}
TODO: I thought this didn't really matter because the script