[Secure-testing-commits] r402 - in sarge-checks: CAN DSA
Joey Hess
joeyh@costa.debian.org
Sun, 13 Feb 2005 20:17:16 +0100
Author: joeyh
Date: 2005-02-13 20:17:13 +0100 (Sun, 13 Feb 2005)
New Revision: 402
Modified:
sarge-checks/CAN/list
sarge-checks/DSA/list
Log:
NMUs
Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list 2005-02-13 18:21:55 UTC (rev 401)
+++ sarge-checks/CAN/list 2005-02-13 19:17:13 UTC (rev 402)
@@ -1,9 +1,9 @@
CAN-2005-0365
- kdelibs 4:3.3.2-2
CAN-2005-0363
- - awstats (unfixed; bug #294488)
+ - awstats 6.2-1.2
CAN-2005-0362
- - awstats (unfixed; bug #294488)
+ - awstats 6.2-1.2
NOTE: http://patches.ubuntu.com/patches/awstats.more-CAN-2005-0016.diff
NOTE: http://packetstormsecurity.nl/0501-exploits/AWStatsVulnAnalysis.pdf
CAN-2005-0284 (SQL injection vulnerability in addentry.php in Woltlab Burning Book ...)
Modified: sarge-checks/DSA/list
===================================================================
--- sarge-checks/DSA/list 2005-02-13 18:21:55 UTC (rev 401)
+++ sarge-checks/DSA/list 2005-02-13 19:17:13 UTC (rev 402)
@@ -4,11 +4,11 @@
NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-677-1 sympa - buffer overflow
{CAN-2005-0073}
- - sympa (unfixed; bug #294795)
+ - sympa 4.1.2-2.1
NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-676-1 xpcd - buffer overflow
{CAN-2005-0074}
- - xpcd (unfixed; bug #294793)
+ - xpcd 2.08-11.1
NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-674-2 mailman - cross-site scripting, directory traversal
NOTE: only fixed bug in DSA