[Secure-testing-commits] r3259 - in data: CVE DSA

[Micah Anderson]

Author: micah
Date: 2006-01-10 17:22:41 +0000 (Tue, 10 Jan 2006)
New Revision: 3259

Modified:
   data/CVE/list
   data/DSA/list
Log:
DSA-933-1 and DSA-934-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-10 14:00:16 UTC (rev 3258)
+++ data/CVE/list	2006-01-10 17:22:41 UTC (rev 3259)
@@ -2859,6 +2859,7 @@
 	{DSA-929-1}
 	- petris <unfixed>
 CVE-2005-3539 (Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier ...)
+	{DSA-933-1}
 	- hylafax 2:4.2.4-2
 	NOTE: First patch had regressions
 CVE-2005-3538 (hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts ...)
@@ -3921,6 +3922,7 @@
 	- pavuk 0.9.33-1 (bug #264684; high)
 	NOTE: second hole mentioned in bug report
 CVE-2005-3751 (HTTP request smuggling vulnerability in Pound before 1.9.4 allows ...)
+	{DSA-934-1}
 	[sarge] - pound 1.8.2-1sarge1
 	- pound 1.9.4-1 (low)
 	NOTE: see http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/1129827166000/index_html?fullMode=1#1129827166000
@@ -11384,6 +11386,7 @@
 CVE-2005-1392 (The SQL install script in phpMyAdmin 2.6.2 is created with ...)
 	- phpmyadmin <not-affected> (Only part of examples that an admin would need to modify anyway)
 CVE-2005-1391 (Buffer overflow in the add_port function in APSIS Pound 1.8.2 and ...)
+        {DSA-934-1}
 	[sarge] - pound 1.8.2-1sarge1
 	- pound 1.8.2-1.1 (bug #307852; bug #311548; medium)
 CVE-2005-1390

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2006-01-10 14:00:16 UTC (rev 3258)
+++ data/DSA/list	2006-01-10 17:22:41 UTC (rev 3259)
@@ -1,3 +1,12 @@
+[09 Jan 2006] DSA-934-1 pound - remote
+	{CVE-2005-1391 CVE-2005-3751}
+	[sarge] - pound 1.8.2-1sarge1
+	NOTE: Fixed in testing at time of DSA
+[09 Jan 2006] DSA-933-1 hylafax - arbitrary command execution
+	{CVE-2005-3539}
+	[woody] - hylafax 4.1.1-4woody1
+	[sarge] - hylafax 4.2.1-5sarge3
+	NOTE: Not fixed in testing at time of DSA (Valid candidate should sync today)
 [09 Jan 2006] DSA-932-1 kdegraphics - buffer overflows
         {CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
         [sarge] - kdegraphics 3.3.2-2sarge3
@@ -2950,4 +2959,4 @@
 	[woody] - openssl 0.9.6c-2.woody.1
 [02 Jul 2002] DSA-135 libapache-mod-ssl -- buffer overflow / DoS
 	{CVE-2002-0653}
-	[woody] - libapache-mod-ssl 2.8.9-2
\ No newline at end of file
+	[woody] - libapache-mod-ssl 2.8.9-2