[Secure-testing-commits] r111 - sarge-checks/CAN

Joey Hess joeyh@haydn.debian.org
Fri, 12 Nov 2004 11:38:06 -0700


Author: joeyh
Date: 2004-11-12 11:37:55 -0700 (Fri, 12 Nov 2004)
New Revision: 111

Modified:
   sarge-checks/CAN/list
Log:
openssl bug fixed


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2004-11-12 11:11:39 UTC (rev 110)
+++ sarge-checks/CAN/list	2004-11-12 18:37:55 UTC (rev 111)
@@ -89,34 +89,36 @@
 	- imagemagick 6:6.0.6.2-1.5
 CAN-2004-0980
 	NOTE: reserved
+	- ez-ipupdate (unfixed; bug filed)
 CAN-2004-0979
 	NOTE: not-for-us (windows)
 CAN-2004-0978
 	NOTE: not-for-us (windows)
-CAN-2004-0977 [local; low]
+CAN-2004-0977
 	- postgresql 7.4.6-1
-CAN-2004-0976 [local; low]
+CAN-2004-0976
 	- perl 5.8.4-4
-CAN-2004-0975 [local; low]
-	- openssl (unfixed; bug #278260)
+CAN-2004-0975
+        - openssl 0.9.7e-1
+        NOTE: also includes other security fixes than this CAN
 CAN-2004-0974 [local; low]
 	- netatalk 1.6.4a-1
 CAN-2004-0973
 	NOTE: rejected
 CAN-2004-0972
 	NOTE: lvmcreate_initrd not in debian
-CAN-2004-0971 [local; low]
+CAN-2004-0971
 	- kbr5 (unfixed; bug #278271; not shipped in binary package)
 	- arla 0.36.2-11
-CAN-2004-0970 [local; medium]
+CAN-2004-0970
 	NOTE: sarge is not vulnerable as our version uses set -C
-CAN-2004-0969 [local; medium]
+CAN-2004-0969
 	- groff 1.18.1.1-2
-CAN-2004-0968 [local; medium]
+CAN-2004-0968
 	- libc6 (unfixed; bug #278278)
-CAN-2004-0967 [local; medium]
+CAN-2004-0967
 	- gs-common 0.3.6-0.1
-CAN-2004-0966 [local; medium]
+CAN-2004-0966
 	- gettext 0.14.1-6
 CAN-2004-0965
 	NOTE: reserved