[Secure-testing-commits] r3626 - in data: . DSA

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-03-16 13:04:33 +0000 (Thu, 16 Mar 2006)
New Revision: 3626

Modified:
   data/DSA/list
   data/ID_pending
Log:
xpvm DSA


Modified: data/DSA/list
===================================================================
--- data/DSA/list	2006-03-16 11:17:09 UTC (rev 3625)
+++ data/DSA/list	2006-03-16 13:04:33 UTC (rev 3626)
@@ -1,3 +1,8 @@
+[16 Mar 2006] DSA-1003-1 xpvm - insecure temporary file
+	{CVE-2005-2240}
+	[woody] - xpvm 1.2.5-7.2woody1
+	[sarge] - xpvm 1.2.5-7.3sarge1
+	NOTE: fixed in testing at the time of DSA (not in testing)
 [15 Mar 2006] DSA-1002-1 webcalendar - several
 	{CVE-2005-3949 CVE-2005-3961 CVE-2005-3982}
 	[sarge] - webcalendar 0.9.45-4sarge3

Modified: data/ID_pending
===================================================================
--- data/ID_pending	2006-03-16 11:17:09 UTC (rev 3625)
+++ data/ID_pending	2006-03-16 13:04:33 UTC (rev 3626)
@@ -9,8 +9,6 @@
 	NOTE: Only an example, not in the binary package
 CVE-2006-XXXX [webcheck XSS]
 	- webcheck 1.9.6
-CVE-2006-XXXX [Insecure rpath in amaya]
-	- amaya 9.4-1 (bug #341424)
 CVE-2006-XXXX [cherrypy2 information disclosure]
 	- cherrypy2 2.1.1-1 (bug #353542)
 CVE-2006-XXXX [sa-exim: deletion of files]