[Secure-testing-commits] r1378 - data/CAN

[Joey Hess]

Author: joeyh
Date: 2005-07-14 07:04:59 +0000 (Thu, 14 Jul 2005)
New Revision: 1378

Modified:
   data/CAN/list
Log:
canified ekg, but it has a second set of security holes which may get
another can and has a separate bug filed


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-07-13 18:57:59 UTC (rev 1377)
+++ data/CAN/list	2005-07-14 07:04:59 UTC (rev 1378)
@@ -1,3 +1,4 @@
+
 CAN-2005-XXXX [base-config log should not be world readable]
 	- base-config 2.68 (low)
 CAN-2005-2169 (Directory traversal vulnerability in source.php in Quick & Dirty ...)
@@ -113,7 +114,7 @@
 CAN-2004-2154 (CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as ...)
 	- cupsys 1.1.20final+rc1-1 (low)
 CAN-2005-XXXX [Insecure tempfile generation in ekg]
-	- ekg (unfixed; bug #317027; medium)
+	- ekg (unfixed; bug #318059; medium)
 CAN-2005-2116 (Unknown vulnerability in the third-party XML-RPC library in Drupal ...)
 	NOTE: This will probably be re-organized by the CVE editor, but lets keep it for now,
 	NOTE: as it's the same issue
@@ -170,11 +171,10 @@
 	NOTE: We have to check whether zlib 1.1 is really not affected, sometimes the CVE
 	NOTE: descriptions are flaky wrt affected versions, kernel, mozilla, rsync and oo
 	NOTE: supposedly use 1.1
-	TODO: - kernel-source-2.6.11 (unfixed; medium)
-	TODO: - kernel-source-2.4.27 (unfixed; medium)
-	TODO: - mozilla (unfixed; medium)
-	TODO: - openoffice.org (unfixed; medium)
-	TODO: - rsync (unfixed; medium)
+	NOTE: Florian Weimer is doing a comprehensive audit using clamav
+	NOTE: to search for static zlib signatures in binaries in Debian
+	NOTE: Not all of the listed packages have been checked for actual
+	NOTE: exploitability using this hole.
 	- dpkg (unfixed; bug #317967; medium)
 	- zsync (unfixed; bug #317968; medium)
 	- dump (unfixed; bug #317966; medium)
@@ -183,6 +183,14 @@
 	- ia32-libs (unfixed; bug #317971; medium)
 	- dar-static (unfixed; bug #317989; medium)
 	- bacula-sd (unfixed; bug #318014; medium)
+	- sash (unfixed; bug #318069; medium)
+	- libphysfs-1.0-0 (unfixed; bug #318091; medium)
+	- mrtg (unfixed; bug #318096; medium)
+	- oops (unfixed; bug #318097; medium)
+	- lsb-rpm (unfixed; bug #318099; medium)
+	- rageircd (unfixed; bug #309196; medium)
+	- systemimager-ssh (unfixed; bug #318101; medium)
+	- texmacs (unfixed; bug #318100; medium)
 CAN-2005-2095
 	NOTE: reserved
 	- squirrelmail (unfixed; #317094; medium)
@@ -1319,7 +1327,7 @@
 CAN-2005-1917 (kpopper 1.0 and earlier allows local users to create and overwrite ...)
 	TODO: check
 CAN-2005-1916 (linki.py in ekg 2005-06-05 and earlier allows local users to overwrite ...)
-	TODO: check
+	- ekg (unfixed; bug #317027; low)
 CAN-2005-1915
 	NOTE: reserved
 CAN-2005-1914 [Insecure tempfile usage in centericq]