[Secure-testing-commits] r607 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Tue, 22 Mar 2005 08:30:03 +0100


Author: jmm-guest
Date: 2005-03-22 08:30:00 +0100 (Tue, 22 Mar 2005)
New Revision: 607

Modified:
   sarge-checks/CAN/list
Log:
Readd some provisional vulnerability titles.
limewire has been scheduled for removal.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-03-22 01:56:03 UTC (rev 606)
+++ sarge-checks/CAN/list	2005-03-22 07:30:00 UTC (rev 607)
@@ -1,6 +1,6 @@
-CAN-2005-XXXX
+CAN-2005-XXXX [Various /tmp related security issues in cernlib]
 	cernlib 2004.11.04-3
-CAN-2005-XXXX
+CAN-2005-XXXX [Buffer overflow in overly long highscore entries in ltris]
 	ltris (unfixed; bug #291620)
 CAN-2005-0823 (ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores ...)
 	NOTE: not-for-us (iSnooker)
@@ -169,11 +169,11 @@
 CAN-2001-1415 (vi.recover in OpenBSD before 3.1 allows local users to remove ...)
 	NOTE: not-for-us
 	NOTE: Debian's nvi recover script is very different
-CAN-2005-XXXX
+CAN-2005-XXXX [Connection related DoS possibility in OmniORB 4]
 	- omniorb4 4.0.5-2
 CAN-2005-0789 (Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 ...)
 	- limewire (unfixed; bug #300634)
-	NOTE: Seems like a candidate for removal from Sarge/sid
+	NOTE: Has been scheduled for removal from ftpmasters
 CAN-2005-0788 (LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary ...)
 	- limewire (unfixed; bug #300634)
 	NOTE: Seems like a candidate for removal from Sarge/sid