[Secure-testing-commits] r2376 - data/DSA

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-10-10 08:11:52 +0000 (Mon, 10 Oct 2005)
New Revision: 2376

Modified:
   data/DSA/list
Log:
four new DSAs


Modified: data/DSA/list
===================================================================
--- data/DSA/list	2005-10-09 21:14:18 UTC (rev 2375)
+++ data/DSA/list	2005-10-10 08:11:52 UTC (rev 2376)
@@ -1,3 +1,19 @@
+[10 Oct 2005] DSA-857-1 graphviz - insecure temporary file
+	{CAN-2005-2965}
+	- graphviz 2.2.1-1sarge1 (low) 
+	NOTE: fixed in testing at time of DSA
+[10 Oct 2005] DSA-856-1 py2play - design error
+	{CAN-2005-2875}
+	- py2play 0.1.8-1 (bug #326976; medium)
+	NOTE: fixed in testing at time of DSA
+[10 Oct 2005] DSA-855-1 weex - format string vulnerability
+	{CAN-2005-3150}
+	- weex 2.6.1-6sarge1 (bug #332424; medium)
+	NOTE: not fixed in testing at time of DSA (DSA fix propagated to sid)
+[09 Oct 2005] DSA-854-1 tcpdump - infinite loop
+	{CAN-2005-1267}
+	- tcpdump 3.9.0.cvs.20050614-1
+	NOTE: fixed in testing at time of DSA
 [09 Oct 2005] DSA-853-1 ethereal - several
 	{CAN-2005-2360 CAN-2005-2361 CAN-2005-2363 CAN-2005-2364 CAN-2005-2365 CAN-2005-2366 CAN-2005-2367}
 	- ethereal 0.10.12-1