[Secure-testing-commits] r1663 - data/CAN website

[Micah Anderson]

Author: micah
Date: 2005-08-27 00:38:12 +0000 (Sat, 27 Aug 2005)
New Revision: 1663

Modified:
   data/CAN/list
   website/README
Log:
Added bug numbers, and references, fixed typo


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-08-26 21:00:36 UTC (rev 1662)
+++ data/CAN/list	2005-08-27 00:38:12 UTC (rev 1663)
@@ -361,7 +361,8 @@
 CAN-2003-1229 (X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and ...)
 	NOTE: not-for-us (Sun JSSE and JRE)
 CAN-2005-2617 (The syscall32_setup_pages function in syscall32.c for Linux kernel ...)
-	TODO: check with kernel team (pinged on irc)
+	TODO: check with kernel team (pinged on irc and on list)
+	NOTE: http://lists.debian.org/debian-kernel/2005/08/msg00991.html 
 	NOTE: amd64 specific DOS
 CAN-2005-2616 (Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote ...)
 	NOTE: not-for-us (ezUpload)
@@ -731,13 +732,13 @@
 CAN-2005-2535 (Buffer overflow in the Discovery Service in BrightStor ARCserve Backup ...)
 	NOTE: not-for-us (ARCserve Backup)
 CAN-2005-2534 (Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not ...)
-	TODO: check
+	NOTE: openvpn (unfixed; bug #324167; high)
 CAN-2005-2533 (OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging ...)
-	TODO: check
+	NOTE: openvpn (unfixed; bug #324167; high)
 CAN-2005-2532 (OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue ...)
-	TODO: check
+	NOTE: openvpn (unfixed; bug #324167; high)
 CAN-2005-2531 (OpenVPN before 2.0.1, when running with "verb 0" and without TLS ...)
-	TODO: check
+	NOTE: openvpn (unfixed; bug #324167; high)
 CAN-2005-2530
 	NOTE: reserved
 CAN-2005-2529

Modified: website/README
===================================================================
--- website/README	2005-08-26 21:00:36 UTC (rev 1662)
+++ website/README	2005-08-27 00:38:12 UTC (rev 1663)
@@ -1,3 +1,3 @@
-Note that this website is maintained in the team's suversion repository.
+Note that this website is maintained in the team's subversion repository.
 Any files placed here will be deleted by the next automatic checkout of the
 website.