[Secure-testing-commits] r2433 - data/CAN

Joey Hess joeyh at costa.debian.org
Tue Oct 18 00:36:39 UTC 2005


Author: joeyh
Date: 2005-10-18 00:36:35 +0000 (Tue, 18 Oct 2005)
New Revision: 2433

Modified:
   data/CAN/list
Log:
apt-listchanges issue is at most low, probably not a legit security issue
at all


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-10-17 22:31:41 UTC (rev 2432)
+++ data/CAN/list	2005-10-18 00:36:35 UTC (rev 2433)
@@ -340,7 +340,7 @@
 	- kdebase 4:3.3.1-1 (bug #278002; low)
 	TODO: According to http://secunia.com/secunia_research/2004-10/advisory/ Firefox and Mozilla aff. as well
 CAN-2005-XXXX [apt-listchanges does not drop privs, spawned pagers may permit execution of further commands]
-	- apt-listchanges <unfixed> (bug #318736; medium)
+	- apt-listchanges <unfixed> (bug #318736; low)
 CAN-2003-XXXX [Incomplete reporting of failed logins in login]
 	- login 1:4.0.3-36 (bug #192849)
 CAN-2004-XXXX [slapd debconfage writes password to world readable file under certain circumstances]




More information about the Secure-testing-commits mailing list