[Secure-testing-commits] r821 - sarge-checks/CAN

Joey Hess joeyh@costa.debian.org
Thu, 14 Apr 2005 18:38:05 +0000


Author: joeyh
Date: 2005-04-14 18:38:02 +0000 (Thu, 14 Apr 2005)
New Revision: 821

Modified:
   sarge-checks/CAN/list
Log:
updates

Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-04-14 18:13:41 UTC (rev 820)
+++ sarge-checks/CAN/list	2005-04-14 18:38:02 UTC (rev 821)
@@ -130,7 +130,7 @@
 CAN-2005-1036 (FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO ...)
 	NOTE: not-for-us (FreeBSD)
 CAN-2005-1035 (Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack ...)
-	- pavuk (unfixed; bug filed)
+	- pavuk (unfixed; bug #304552)
 CAN-2005-1034 (SurgeFTP 2.2m1 allows remote attackers to cause a denial of service ...)
 	NOTE: not-for-us (SurgeFTP)
 CAN-2005-1033 (CubeCart 2.0.6 allows remote attackers to obtain sensitive information ...)
@@ -461,7 +461,7 @@
 CAN-2005-0891 (Double-free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote ...)
 	NOTE: The description is wrong; 2.6 is affected as well
 	- gtk+2.0 2.6.4-1
-	- gdk-pixbuf (unfixed; bug #303441)
+	- gdk-pixbuf 0.22.0-7.1
 CAN-2004-1773 (Multiple buffer overflows in sharutils 4.2.1 and earlier may allow ...)
 	- sharutils 1:4.2.1-12
 CAN-2004-1772 (Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows ...)