[Secure-testing-commits] r5044 - data/CVE

Stefan Fritsch stef-guest at alioth.debian.org
Sat Dec 2 00:11:22 CET 2006


Author: stef-guest
Date: 2006-12-02 00:11:20 +0100 (Sat, 02 Dec 2006)
New Revision: 5044

Modified:
   data/CVE/list
Log:
remove some more obsolete TODOs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-01 23:03:20 UTC (rev 5043)
+++ data/CVE/list	2006-12-01 23:11:20 UTC (rev 5044)
@@ -34123,14 +34123,12 @@
 CVE-2003-0695 (Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow ...)
 	{DSA-383 DSA-382}
 	- openssh 1:3.7.1
-	TODO: openssh-krb5: Screwy changelog does not make sense (bug #264717).
 CVE-2003-0694 (The prescan function in Sendmail 8.12.9 allows remote attackers to ...)
 	{DSA-384}
 	- sendmail 8.12.10-1
 CVE-2003-0693 (A "buffer management error" in buffer_append_space of buffer.c for ...)
 	{DSA-383 DSA-382}
 	- openssh 1:3.6.1p2-6.0
-	TODO: openssh-krb5: Screwy changelog does not make sense (bug #264717).
 CVE-2003-0692 (KDM in KDE 3.1.3 and earlier uses a weak session cookie generation ...)
 	{DSA-388}
 	- kdebase 4:3.2
@@ -36798,7 +36796,6 @@
 	NOT-FOR-US: realsecure/blackice
 CVE-2004-0191 (Mozilla before 1.4.2 executes Javascript events in the context of a ...)
 	- mozilla-browser 2:1.7.3
-	TODO: test
 CVE-2004-0190 (Symantec FireWall/VPN Appliance model 200 records a cleartext ...)
 	NOT-FOR-US: symantec
 CVE-2004-0189 (The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows ...)
@@ -36876,12 +36873,10 @@
 	NOT-FOR-US: os x
 CVE-2004-0082 (The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and ...)
 	- samba 3.0.7
-	TODO: test
 CVE-2004-0080 (The login program in util-linux 2.11 and earlier uses a pointer after ...)
 	NOT-FOR-US: debian uses different login
 CVE-2004-0078 (Buffer overflow in the index menu code (menu_pad_string of menu.c) for ...)
 	- mutt 1.5.6-20040722+1
-	TODO: test
 CVE-2004-0077 (The do_mremap function for the mremap system call in Linux 2.2 to ...)
 	{DSA-514 DSA-475 DSA-470 DSA-466 DSA-456 DSA-454 DSA-453 DSA-450 DSA-444 DSA-442 DSA-441 DSA-440 DSA-439 DSA-438}
 	- kernel-source-2.4.27 <not-affected> (Fixed before initial upload; 2.4.26-pre3)
@@ -36889,7 +36884,6 @@
 CVE-2004-0075 (The Vicam USB driver in Linux before 2.4.25 does not use the ...)
 	- kernel-source-2.4.24 2.4.24-3
 	NOTE: fixed in 2.4.26-pre3
-	TODO: test
 CVE-2004-0070 (PHP remote file inclusion vulnerability in module.php for ezContents ...)
 	NOT-FOR-US: ezcontents, commercial
 CVE-2004-0068 (PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 ...)
@@ -36932,7 +36926,6 @@
 	- fsp 2.81.b18-1
 CVE-2004-0009 (Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 ...)
 	- apache-ssl 1.3.31
-	TODO: test
 CVE-2004-0004 (The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 ...)
 	NOT-FOR-US: openca, not in debian
 CVE-2004-0001 (Unknown vulnerability in the eflags checking in the 32-bit ptrace ...)




More information about the Secure-testing-commits mailing list