[Secure-testing-commits] r316 - in sarge-checks: CAN DSA

[Joey Hess]

Author: joeyh
Date: 2005-01-25 20:40:42 +0100 (Tue, 25 Jan 2005)
New Revision: 316

Modified:
   sarge-checks/CAN/list
   sarge-checks/DSA/list
Log:
updates


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-01-24 14:17:10 UTC (rev 315)
+++ sarge-checks/CAN/list	2005-01-25 19:40:42 UTC (rev 316)
@@ -62,6 +62,7 @@
 	- squirrelmail 2:1.4.4-1
 CAN-2005-0102
 	NOTE: reserved
+	- evolution 2.0.3-1.2
 CAN-2005-0101
 	NOTE: reserved
 CAN-2005-0100
@@ -109,14 +110,14 @@
 CAN-2005-0081 (MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote ...)
 	- maxdb-7.5.00 7.5.00.21-1
 CAN-2004-1379 (Heap-based buffer overflow in the DVD subpicture decoder in xine ...)
-	- xine-lib 1-rc7-1
+	- xine-lib 1-rc6a-1
 CAN-2004-1378 (The expat XML parser code, as used in the open source Jabber (jabberd) ...)
 	- jabber 1.4.3-3
 	NOTE: not-for-us (jadc2s)
 CAN-2004-1377 (The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) ...)
 	- a2ps 1:4.13b-4.3
 CAN-2003-1054 (mod_access_referer 1.0.2 allows remote attackers to cause a denial of ...)
-	TODO: check
+	NOTE: not-for-us (mod_access_referer)
 CAN-2003-1053 (Multiple buffer overflows in XShisen allow attackers to execute ...)
 	- xshisen 1.51-1-1
 CAN-2005-0080 (The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 ...)
@@ -987,7 +988,7 @@
 CAN-2004-1062 (Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 ...)
 	- viewcvs 0.9.2+cvs.1.0.dev.2004.07.28-1.3
 CAN-2004-1061 (Cross-site scripting (XSS) vulnerability in unknown versions of ...)
-	TODO: check
+	- bugzilla 2.16.7-2
 CAN-2004-1060
 	NOTE: reserved
 CAN-2004-1059 (Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch ...)
@@ -1307,7 +1308,7 @@
 CAN-2004-0932 (McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th ...)
 	NOTE: not-for-us (McAfee Anti-Virus Engine DATS drivers)
 CAN-2004-0931 (MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial ...)
-	TODO: check
+	- maxdb-7.5.00 7.5.00.18
 CAN-2004-0930 (The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other ...)
 	- samba 3.0.8-1
 CAN-2004-0929 (Heap-based buffer overflow in the OJPEGVSetField function in ...)

Modified: sarge-checks/DSA/list
===================================================================
--- sarge-checks/DSA/list	2005-01-24 14:17:10 UTC (rev 315)
+++ sarge-checks/DSA/list	2005-01-25 19:40:42 UTC (rev 316)
@@ -1,3 +1,19 @@
+[25 Jan 2005] DSA-658-1 libdbi-perl - insecure temporary file
+	{CAN-2005-0077}
+	- libdbi-perl 1.46-6
+	NOTE: not fixed in testing at time of DSA
+[25 Jan 2005] DSA-657-1 xine-lib - buffer overflow
+	{CAN-2004-1379}
+	- xine-lib 1-rc6a-1
+	NOTE: fixed in testing at time of DSA
+[25 Jan 2005] DSA-656-1 vdr - insecure file access
+	{CAN-2005-0071}
+	- vdr 1.2.6-6
+	NOTE: not fixed in testing at time of DSA
+[25 Jan 2005] DSA-655-1 zhcon - missing privilege release
+	{CAN-2005-0072}
+	- zhcon (unfixed; bug filed)
+	NOTE: not fixed in testing at time of DSA
 [21 Jan 2005] DSA-654-1 enscript - several
 	{CAN-2004-1184 CAN-2004-1185 CAN-2004-1186}
 	- enscript 1.6.4-6