[Secure-testing-commits] r1824 - in data: . CAN

Moritz Muehlenhoff jmm-guest at costa.debian.org
Tue Sep 6 07:54:16 UTC 2005


Author: jmm-guest
Date: 2005-09-06 07:54:13 +0000 (Tue, 06 Sep 2005)
New Revision: 1824

Modified:
   data/CAN/list
   data/embedded-code-copies
Log:
gnumeric/pcre confirmed non-vulnerable
amarok/sqlite code sharing (no vulnerabilities known, but let's
  be prepared)


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-09-05 21:14:17 UTC (rev 1823)
+++ data/CAN/list	2005-09-06 07:54:13 UTC (rev 1824)
@@ -1015,8 +1015,8 @@
 CAN-2005-2491 (Integer overflow in pcre_compile.c in Perl Compatible Regular ...)
 	{DSA-800-1 DTSA-10-1}
 	- pcre3 6.3-0.1etch1 (bug #324531; medium)
-	NOTE: According to upstream not directly exploitable in gnumeric
-	- gnumeric (unfixed; bug #326628; low)
+	NOTE: gnumeric includes one as well; according to upstream not exploitable in gnumeric,
+	NOTE: new copy will be included any way
 	- python2.1 2.1.3dfsg-3 (medium)
 	- python2.2 2.2.3dfsg-4 (medium)
 	- python2.3 2.3.5-8 (medium)

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2005-09-05 21:14:17 UTC (rev 1823)
+++ data/embedded-code-copies	2005-09-06 07:54:13 UTC (rev 1824)
@@ -85,3 +85,6 @@
 
 uudeview:
 libconvert-uulib-perl
+
+sqlite: (not affected by security vulnerabilities so far)
+amarok




More information about the Secure-testing-commits mailing list