[Secure-testing-commits] r360 - sarge-checks/CAN

[Joey Hess]

Author: joeyh
Date: 2005-02-07 01:24:01 +0100 (Mon, 07 Feb 2005)
New Revision: 360

Modified:
   sarge-checks/CAN/list
Log:
bug updates


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-02-06 22:49:40 UTC (rev 359)
+++ sarge-checks/CAN/list	2005-02-07 00:24:01 UTC (rev 360)
@@ -105,7 +105,7 @@
 CAN-2005-0176
 	NOTE: reserved
 CAN-2004-1392 (PHP 4.0 with cURL functions allows remote attackers to bypass the ...)
-	TODO: check (asked vorlon if we've vulnerable)
+	TODO: check
 CAN-2004-1391 (Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in ...)
 	NOTE: not-for-us (PPPoE daemon (PPPoEd) in QNX RTP)
 CAN-2004-1390 (Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 ...)
@@ -119,11 +119,11 @@
 CAN-2004-1386 (TikiWiki before 1.8.4.1 does not properly verify uploaded images, ...)
 	NOTE: not-for-us (TikiWiki)
 CAN-2004-1385 (phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain ...)
-	- phpgroupware (unfixed; bug #293906)
+	- phpgroupware 0.9.16.005-1
 CAN-2004-1384 (Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare ...)
-	- phpgroupware (unfixed; bug #293906)
+	- phpgroupware 0.9.16.005-1
 CAN-2004-1383 (Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and ...)
-	- phpgroupware (unfixed; bug #293906)
+	- phpgroupware 0.9.16.005-1
 CAN-2004-1382 (The glibcbug script in glibc 2.3.4 and earlier allows local users to ...)
 	- 2.3.2.ds1-19
 CAN-2005-0218 (ClamAV 0.80 and earlier allows remote attackers to bypass virus ...)
@@ -2133,7 +2133,7 @@
 	NOTE: not-for-us (Lotus)
 CAN-2004-0667 (Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows ...)
 	NOTE: kernel-patch-adamantix contain the RSBAC patch v1.2.2 and is vulnerable.
-	- kernel-patch-adamantix (unfixed, buf filed)
+	- kernel-patch-adamantix (unfixed, bug #293940)
 CAN-2004-0666 (Off-by-one error in the POP3_readmsg function in popclient 3.0b6 ...)
 	NOTE: not-for-us (popclient not in Debian)
 CAN-2004-0665 (csFAQ.cgi in csFAQ allows remote attackers to gain sensitive ...)