[Secure-testing-commits] r332 - in sarge-checks: CAN DSA

Joey Hess joeyh@costa.debian.org
Wed, 02 Feb 2005 04:50:56 +0100


Author: joeyh
Date: 2005-02-02 04:50:53 +0100 (Wed, 02 Feb 2005)
New Revision: 332

Modified:
   sarge-checks/CAN/list
   sarge-checks/DSA/list
Log:
update


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-02-01 03:28:07 UTC (rev 331)
+++ sarge-checks/CAN/list	2005-02-02 03:50:53 UTC (rev 332)
@@ -39,8 +39,10 @@
 	NOTE: reserved
 CAN-2005-0156
 	NOTE: reserved
+	- perl (unfixed; joey sent bod a patch)
 CAN-2005-0155
 	NOTE: reserved
+	- perl (unfixed; joey sent bod a patch)
 CAN-2005-0154
 	NOTE: reserved
 CAN-2005-0153

Modified: sarge-checks/DSA/list
===================================================================
--- sarge-checks/DSA/list	2005-02-01 03:28:07 UTC (rev 331)
+++ sarge-checks/DSA/list	2005-02-02 03:50:53 UTC (rev 332)
@@ -1,3 +1,14 @@
+[02 Feb 2005] DSA-663-1 prozilla - buffer overflows
+	{CAN-2004-1120}
+	- prozilla 1.3.7.3-1
+	NOTE: fixed in testing at time of DSA
+[01 Feb 2005] DSA-662-1 squirrelmail - several
+	{CAN-2005-0104 CAN-2005-0152}
+	NOTE: CAN-2005-0152 only exists in 1.2.6 version
+	NOTE: changelog for 1.4.4-1 refers to CAN-2005-0103, pinged joey
+	NOTE: to see which can number is right.
+	- squirrelmail 2:1.4.4-1
+	NOTE: fixed in testing at time of DSA
 [27 Jan 2005] DSA-661-1 f2c - insecure temporary files
 	{CAN-2005-0017 CAN-2005-0018}
 	- f2c (unfixed; bug filed)