[Secure-testing-commits] r3300 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-01-16 10:37:16 +0000 (Mon, 16 Jan 2006)
New Revision: 3300

Modified:
   data/CVE/list
   data/DSA/list
Log:
two new DSAs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-16 10:31:40 UTC (rev 3299)
+++ data/CVE/list	2006-01-16 10:37:16 UTC (rev 3300)
@@ -458,8 +458,9 @@
 	RESERVED
 CVE-2006-0045
 	RESERVED
-CVE-2006-0044
+CVE-2006-0044 [albatross code execution]
 	RESERVED
+	- albatross 1.33-1
 CVE-2005-4585 (Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to ...)
 	- ethereal <unfixed> (bug #345243; low)
 	NOTE: This affects Woody and Sarge

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2006-01-16 10:31:40 UTC (rev 3299)
+++ data/DSA/list	2006-01-16 10:37:16 UTC (rev 3300)
@@ -1,3 +1,11 @@
+[16 Jan 2006] DSA-942-1 albatross - design error
+	{CVE-2006-0044}
+	[sarge] - albatross 1.20-2
+	NOTE: Fixed in testing at time of DSA
+[16 Jan 2006] DSA-941-1 tuxpaint - insecure temporary file
+	{CVE-2005-3340}
+	[sarge] - tuxpaint 0.9.14-2sarge0
+	NOTE: Not fixed in testing at time of DSA (only 2/2 days old)
 [13 Jan 2006] DSA-940-1 gpdf - buffer overflows
 	{CVE-2005-3191 CVE-2005-3192 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
 	[sarge] - gpdf 2.8.2-1.2sarge2