[Secure-testing-commits] r1031 - sarge-checks/CAN

[Joey Hess]

Author: joeyh
Date: 2005-05-10 18:16:01 +0000 (Tue, 10 May 2005)
New Revision: 1031

Modified:
   sarge-checks/CAN/list
Log:
updates from Moritz, who cannot commit ATM


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-05-10 09:14:18 UTC (rev 1030)
+++ sarge-checks/CAN/list	2005-05-10 18:16:01 UTC (rev 1031)
@@ -1,3 +1,7 @@
+CAN-2005-XXXX [kfreebsd5-source: FreeBSD Security Advisory FreeBSD-SA-05:04.ifconf]
+	- kfreebsd5-source 5.3-10
+CAN-2005-XXXX [phpbb2: Security issue in url/bbcode]
+	- phpbb2 (unfixed; bug #308282)
 CAN-2005-1477 (The install function in Firefox 1.0.3 allows remote web sites on the ...)
 	TODO: check
 CAN-2005-1476 (Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript ...)
@@ -30,7 +34,7 @@
 CAN-2005-XXXX [base-config: World readable config file might reveal password data]
 	- base-config (unfixed; bug #305142)
 CAN-2005-XXXX [Logging bypassing through SIGHUP in syslog-ng]
-	- syslog-ng (unfixed; bug #304894)
+	- syslog-ng 1.6.5-2.1
 CAN-2005-XXXX [tracksballs: Missing checks for symlinks when writing to predictable file names]
 	- trackballs (unfixed; bug #302454)
 CAN-2005-XXXX [Less secure default setting in pwgen or the lack documentation about it]
@@ -38,6 +42,7 @@
 CAN-2005-XXXX [Insecure handling of gpg passphrases in gabber]
 	- gabber (unfixed; bug #177776)
 CAN-2005-1470 (Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, ...)
+	NOTE: backport in progress for this and other ethereal holes
 	- ethereal 0.10.11-1
 CAN-2005-1469 (Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 ...)
 	- ethereal 0.10.11-1
@@ -1878,7 +1883,7 @@
 CAN-2005-0755 (Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player ...)
 	- helix-player 1.0.4-1
 CAN-2005-0754 [Untrusted code execution in Kommander]
-	- kdewebdev 3.3.2-6 
+	- kdewebdev 3.3.2-6
 CAN-2005-0753 [Buffer overflow and several memory access problems in CVS]
 	- cvs 1.12.9-13
 CAN-2005-0752 [PLUGINSPAGE privileged javascript execution in Firefox] 
@@ -2377,6 +2382,7 @@
 CAN-2005-0605 (scan.c for LibXPM may allow attackers to execute arbitrary code via a ...)
 	{DSA-723-1}
 	- lesstif1 1:0.93.94-11.1
+	NOTE: xfree86 upload being prepared
 	- libxpm4 (unfixed; bug #299272)
 CAN-2005-0604 (lnss.exe in GFI Languard Network Security Scanner 5.0 stores the ...)
 	NOTE: not-for-us (GFI Languard Network Security Scanner)
@@ -3399,7 +3405,8 @@
 	{DSA-702-1}
 	- imagemagick 6:6.0.6.2-2.2
 CAN-2005-0396 (Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE ...)
-	- kdelibs 3.3.2-4
+	NOTE: fix in -4 was broken
+	- kdelibs 3.3.2-6
 CAN-2005-0395
 	NOTE: reserved
 CAN-2005-0394