[Secure-testing-commits] r73 - in sarge-checks: CAN DSA

Joey Hess joeyh@haydn.debian.org
Thu, 04 Nov 2004 11:16:24 -0700


Author: joeyh
Date: 2004-11-04 11:16:16 -0700 (Thu, 04 Nov 2004)
New Revision: 73

Modified:
   sarge-checks/CAN/list
   sarge-checks/DSA/list
Log:
newest batch of CANs and a DSA


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2004-11-03 21:53:25 UTC (rev 72)
+++ sarge-checks/CAN/list	2004-11-04 18:16:16 UTC (rev 73)
@@ -1,3 +1,40 @@
+CAN-2004-1008
+	NOTE: reserved
+CAN-2004-1007
+	- bogofilter 0.92.8-1
+CAN-2004-1006
+	NOTE: reserved
+	NOTE: covered by DSA-584-1
+CAN-2004-1005
+	NOTE: reserved
+CAN-2004-1004
+	NOTE: reserved
+CAN-2004-1003
+	NOTE: not-for-us (Trend ScanMail)
+CAN-2004-1002
+	- ppp 2.4.2+20040428-3
+CAN-2004-1001
+	- shadow 1:4.0.3-30.3
+CAN-2004-1000
+	NOTE: reserved
+CAN-2004-0999
+	NOTE: reserved
+CAN-2004-0998
+	NOTE: reserved
+CAN-2004-0997
+	NOTE: reserved
+CAN-2004-0996
+	NOTE: reserved
+CAN-2004-0995
+	NOTE: reserved
+CAN-2004-0994
+	NOTE: reserved
+CAN-2004-0993
+	NOTE: reserved
+CAN-2004-0992
+	NOTE: reserved
+CAN-2004-0991
+	NOTE: reserved
 CAN-2004-0990
 	TODO: probably vulnerable, check libgd1 and libgd2 and file bugs
 CAN-2004-0989
@@ -42,7 +79,6 @@
 CAN-2004-0970 [local; medium]
 	NOTE: bug #278277 closed because scripts are set -C
 	NOTE: bug #279208 opened by Joey Schulze
-	NOTE: security team, make up your minds ;-)
 CAN-2004-0969 [local; medium]
 	- groff 1.18.1.1-2
 CAN-2004-0968 [local; medium]

Modified: sarge-checks/DSA/list
===================================================================
--- sarge-checks/DSA/list	2004-11-03 21:53:25 UTC (rev 72)
+++ sarge-checks/DSA/list	2004-11-04 18:16:16 UTC (rev 73)
@@ -1,3 +1,6 @@
+[04 Nov 2004] DSA-584-1 dhcp - format string vulnerability
+	{CAN-2004-1006}
+	- dhcp 2.0pl5-19.1
 [03 Nov 2004] DSA-583-1 lvm10 - insecure temporary directory
 	{CAN-2004-0972}
 	TODO: I thought this didn't really matter because the script