[Secure-testing-commits] r921 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Tue, 26 Apr 2005 17:40:34 +0000


Author: jmm-guest
Date: 2005-04-26 17:40:30 +0000 (Tue, 26 Apr 2005)
New Revision: 921

Modified:
   sarge-checks/CAN/list
Log:
helix-player fixed
maxdb bug filed


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-04-26 15:43:22 UTC (rev 920)
+++ sarge-checks/CAN/list	2005-04-26 17:40:30 UTC (rev 921)
@@ -1,5 +1,5 @@
 CAN-2005-XXXX [Two buffer overflows in MaxDB]
-	- maxdb-7.5.00 (unfixed)
+	- maxdb-7.5.00 (unfixed; bug filed)
 CAN-2005-1269
 	NOTE: reserved
 CAN-2005-1268
@@ -1392,9 +1392,7 @@
 CAN-2005-0756
 	NOTE: reserved
 CAN-2005-0755 (Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player ...)
-	NOTE: This covers some other security issues as well, since the initial upload
-	NOTE: at 29 Sep 2004 there have been no updates, should be removed from Sarge IMHO
-	- helix-player (unfixed; bug #305504) 
+	- helix-player 1.0.4-1
 CAN-2005-0754 [Untrusted code execution in Kommander]
 	- kdewebdev 3.3.2-5 
 CAN-2005-0753 [Buffer overflow and several memory access problems in CVS]