[Secure-testing-commits] r590 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Mon, 21 Mar 2005 10:02:02 +0100


Author: jmm-guest
Date: 2005-03-21 10:01:59 +0100 (Mon, 21 Mar 2005)
New Revision: 590

Modified:
   sarge-checks/CAN/list
Log:
openslp and wine have been CVE assigned as well.
Fix numerical order of limewire entries.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-03-21 08:58:51 UTC (rev 589)
+++ sarge-checks/CAN/list	2005-03-21 09:01:59 UTC (rev 590)
@@ -1,15 +1,15 @@
 CAN-2005-XXXX (OmniORB serverCallTimeOutPeriod DoS)
 	- omniorb4 4.0.5-2
-CAN-2005-XXXX Insecure world readable storage of the Wine registry
-	- wine (unfixed; bug #300306)
-CAN-2005-XXXX
-	- openslp 1.0.11a-2
-CAN-2005-0788 Possible remote access to arbitrary files in Limewire
+CAN-2005-0789 Possible remote access to arbitrary files in Limewire
 	- limewire (unfixed; bug #300634)
 	NOTE: Seems like a candidate for removal from Sarge/sid
-CAN-2005-0789 Possible remote access to arbitrary files in Limewire
+CAN-2005-0788 Possible remote access to arbitrary files in Limewire
 	- limewire (unfixed; bug #300634)
 	NOTE: Seems like a candidate for removal from Sarge/sid
+CAN-2005-0787 Insecure world readable storage of the Wine registry
+	- wine (unfixed; bug #300306)
+CAN-2005-0769 (Multiple buffer overflows in OpenSLP before 1.1.5 allow remote ...)
+	- openslp 1.0.11a-2
 CAN-2005-0748 (PHP remote code injection vulnerability in initdb.php for WEBInsta ...)
 	NOTE: not-for-us (WEBInsta)
 CAN-2005-0747 (ApplyYourself i-Class allows remote attackers to obtain sensitive ...)