[Secure-testing-commits] r370 - sarge-checks/CAN

Joey Hess joeyh@costa.debian.org
Tue, 08 Feb 2005 21:14:18 +0100


Author: joeyh
Date: 2005-02-08 21:14:15 +0100 (Tue, 08 Feb 2005)
New Revision: 370

Modified:
   sarge-checks/CAN/list
Log:
automatic CAN database update

Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-02-08 16:56:37 UTC (rev 369)
+++ sarge-checks/CAN/list	2005-02-08 20:14:15 UTC (rev 370)
@@ -1,6 +1,29 @@
+CAN-2005-0240 (Format string vulnerability in chdev on IBM AIX 5.2 allows local users ...)
+	TODO: check
+CAN-2005-0239 (viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows ...)
+	TODO: check
+CAN-2005-0238 (The International Domain Name (IDN) support in Epiphany allows remote ...)
+	TODO: check
+CAN-2005-0237 (The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE ...)
+	TODO: check
+CAN-2005-0236 (The International Domain Name (IDN) support in Omniweb 5 allows remote ...)
+	TODO: check
+CAN-2005-0235 (The International Domain Name (IDN) support in Opera 7.54 allows ...)
+	TODO: check
+CAN-2005-0234 (The International Domain Name (IDN) support in Safari 1.2.5 allows ...)
+	TODO: check
+CAN-2005-0233 (The International Domain Name (IDN) support in Firefox 1.0, Camino ...)
+	TODO: check
+CAN-2005-0232
+	NOTE: reserved
+CAN-2005-0231
+	NOTE: reserved
+CAN-2005-0230
+	NOTE: reserved
 CAN-2005-0229
 	NOTE: reserved
-CAN-2005-0228 (Format string vulnerability in the gpsd_report function for BerliOS ...)
+CAN-2005-0228
+	NOTE: rejected
 	- gpsd 2.7-4
 	NOTE: apparently dup of CAN-2004-1388
 CAN-2005-0227 (PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users ...)
@@ -112,7 +135,7 @@
 	NOTE: not-for-us (PPPoE daemon (PPPoEd) in QNX RTP)
 CAN-2004-1389 (Unknown vulnerability in the Veritas NetBackup Administrative ...)
 	NOTE: not-for-us (Veritas NetBackup Administrative Assistant)
-CAN-2004-1388 (Format string vulnerability in the gpsd_report funciton in gpsd 1.9.0 ...)
+CAN-2004-1388 (Format string vulnerability in the gpsd_report function for BerliOS ...)
 	- gpsd 2.7-4
 CAN-2004-1387 (The check_forensic script in apache-utils package 1.3.31 allows local ...)
 	- apache 1.3.33-3
@@ -169,11 +192,9 @@
 	NOTE: reserved
 CAN-2005-0157
 	NOTE: reserved
-CAN-2005-0156
-	NOTE: reserved
+CAN-2005-0156 (Buffer overflow in the PerlIO implementation in Perl 5.8.0, when ...)
 	- perl 5.8.4-6
-CAN-2005-0155
-	NOTE: reserved
+CAN-2005-0155 (The PerlIO implementation in Perl 5.8.0, when installed with setuid ...)
 	- perl 5.8.4-6
 	- mooix 1.0rc5.pre4
 CAN-2005-0154
@@ -303,6 +324,7 @@
 	- newspost 2.1.1-2
 CAN-2005-0100
 	NOTE: reserved
+	{DSA-671-1 DSA-670-1}
 	- emacs21 21.3+1-9
 	- xemacs21 21.4.16-2
 CAN-2005-0099