[Secure-testing-commits] r2974 - data/CVE

Moritz Muehlenhoff jmm-guest at costa.debian.org
Wed Dec 7 16:38:38 UTC 2005


Author: jmm-guest
Date: 2005-12-07 16:38:33 +0000 (Wed, 07 Dec 2005)
New Revision: 2974

Modified:
   data/CVE/list
Log:
tetex-bin/xpdf fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-07 15:47:07 UTC (rev 2973)
+++ data/CVE/list	2005-12-07 16:38:33 UTC (rev 2974)
@@ -4,6 +4,7 @@
 	TODO: Please double-check this
 CVE-2005-XXXX [Off-By-One heap overflow in curl]
 	- curl 7.15.1-1 (bug #342339; medium) 
+	[woody] - curl <not-affected> (Only curl >= 7.11 is vulnerable)
 CVE-2005-XXXX [Buffer overflows in electricsheep]
 	- electricsheep 2.6.3+cvs20051206-1 
 CVE-2005-XXXX [libavcodec: heap overflow in PIX_FMT_PAL8]
@@ -2502,7 +2503,7 @@
 	- pdftohtml <not-affected> (Vulnerable xpdf code not contained)
 	- kdegraphics <unfixed> (bug #342287; medium)
 	- poppler <unfixed> (bug #34228; medium)
-	- tetex-bin <unfixed> (bug #342292; medium)
+	- tetex-bin 3.0-11 (bug #342292; medium)
 	- koffice <not-affected> (Vulnerable xpdf code not contained)
 	- libextractor 0.5.8-1 (medium)
 CVE-2005-3192 [xpdf stream predictor heap overflow]
@@ -2512,7 +2513,7 @@
 	- pdftohtml <unfixed> (bug #342289; medium)
 	- kdegraphics <unfixed> (bug #342287; medium)
 	- poppler <unfixed> (bug #34228; medium)
-	- tetex-bin <unfixed> (bug #342292; medium)
+	- tetex-bin 3.0-11 (bug #342292; medium)
 	- koffice <unfixed> (bug #342294; medium)
 	- libextractor 0.5.8-1 (medium)
 CVE-2005-3191 [xpdf dctstream heap overflow]
@@ -2522,7 +2523,7 @@
 	- pdftohtml <unfixed> (bug #342289; medium)
 	- kdegraphics <unfixed> (bug #342287; medium)
 	- poppler <unfixed> (bug #34228; medium)
-	- tetex-bin <unfixed> (bug #342292; medium)
+	- tetex-bin 3.0-11 (bug #342292; medium)
 	- koffice <unfixed> (bug #342294; medium)
 	- libextractor 0.5.8-1 (medium)
 CVE-2005-3190 (Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 ...)




More information about the Secure-testing-commits mailing list