[Secure-testing-commits] r13906 - data/CVE

[Pedro Ribeiro]

Author: pedrib-guest
Date: 2010-01-25 00:46:48 +0000 (Mon, 25 Jan 2010)
New Revision: 13906

Modified:
   data/CVE/list
Log:
cleaned latent issues CVE-2006-0049, CVE-2006-0455 and CVE-2005-1849


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-01-25 00:39:01 UTC (rev 13905)
+++ data/CVE/list	2010-01-25 00:46:48 UTC (rev 13906)
@@ -63107,9 +63107,7 @@
 CVE-2006-0455 (gpgv in GnuPG before 1.4.2.1, when using unattended signature ...)
 	{DSA-978-1}
 	- gnupg 1.4.2.2-1 (bug #353017; bug #353019; bug #354620; medium)
-	[sarge] - gnupg2 <not-affected> (Vulnerable code not activated)
-	NOTE: http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000211.html indicates that
-	NOTE: *all* versions are affected because gpg --verify is also affected
+	- gnupg2 <not-affected> (Vulnerable code not activated)
 CVE-2006-0454 (Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ...)
 	- linux-2.6 2.6.15-5
 	[sarge] - kernel-source-2.6.8 <not-affected>
@@ -64271,7 +64269,7 @@
 CVE-2006-0049 (gpg in GnuPG before 1.4.2.2 does not properly verify non-detached ...)
 	{DSA-993-2}
 	- gnupg 1.4.2.2-1 (bug #356125; medium)
-	[sarge] - gnupg2 <not-affected> (Vulnerable code not activated)
+	- gnupg2 <not-affected> (Vulnerable code not activated)
 CVE-2006-0048 (Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a ...)
 	- tcpick 0.2.1-3 (bug #360571; low)
 	[sarge] - tcpick <no-dsa> (Minor issue)
@@ -73573,6 +73571,7 @@
 	NOTE: This is only contrib code not built in the binary packages AFAIK
 	- zlib 1:1.2.3-1 (low)
 	- zsync 0.4.1-1 (low)
+	- sash 3.7-5sarge1 (low)
 	NOTE: zsync 0.4.0-2 (mentioned in DSA-797-1) was never uploaded.
 CVE-2005-1848 (The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause ...)
 	{DSA-750-1}