[Secure-testing-commits] r879 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Thu, 21 Apr 2005 09:01:18 +0000


Author: jmm-guest
Date: 2005-04-21 09:01:13 +0000 (Thu, 21 Apr 2005)
New Revision: 879

Modified:
   sarge-checks/CAN/list
Log:
Minor directory traversal bugs in gunzip and cpio,
only exploitable under rare circumstances.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-04-21 08:26:30 UTC (rev 878)
+++ sarge-checks/CAN/list	2005-04-21 09:01:13 UTC (rev 879)
@@ -1,3 +1,6 @@
+CAN-2005-XXXX [Minor directory traversal bugs in cpio and gzip]
+	- gzip (unfixed; bug #305255)
+	- cpio (unfixed)
 CAN-2005-XXXX [Multiple security issues in egroupware]
 	- egroupware (unfixed; bug #305576)
 CAN-2005-1191 (The Web View DLL (webvw.dll), as used in Windows Explorer on Windows ...)