[Secure-testing-commits] r2502 - data/DSA

[Florian Weimer]

Author: fw
Date: 2005-10-20 11:57:35 +0000 (Thu, 20 Oct 2005)
New Revision: 2502

Modified:
   data/DSA/list
Log:
Add remarks regarding DSA-866-1 and CVE-2005-2968.


Modified: data/DSA/list
===================================================================
--- data/DSA/list	2005-10-20 11:51:05 UTC (rev 2501)
+++ data/DSA/list	2005-10-20 11:57:35 UTC (rev 2502)
@@ -4,10 +4,13 @@
         [sarge] - module-assistant 0.9sarge1
 	NOTE: fixed in testing at time of DSA
 [20 Oct 2005] DSA-866-1 mozilla - several
-	{CVE-2005-2871 CVE-2005-2701 CVE-2005-2702 CVE-2005-2703 CVE-2005-2704 CVE-2005-2705 CVE-2005-2706 CVE-2005-2707 CVE-2005-2968}
+	{CVE-2005-2871 CVE-2005-2701 CVE-2005-2702 CVE-2005-2703 CVE-2005-2704 CVE-2005-2705 CVE-2005-2706 CVE-2005-2707}
         [woody] - mozilla <unfixed>
         [sarge] - mozilla 1:1.7.8-1sarge3
 	NOTE: not fixed in testing at time of DSA (missing hppa, RC bugs)
+	NOTE: DSA claims to fix CVE-2005-2968 and contains a patch.  But
+	NOTE: mozilla-browser 1.7.8-1sarge2 does not contain the 
+	NOTE: wrapper script in a vulnerable version.
 [13 Oct 2005] DSA-865-1 hylafax - insecure temporary files
 	{CVE-2005-3069}
 	- hylafax 1:4.2.2-1