Author: joeyh
Date: 2005-08-19 20:13:35 +0000 (Fri, 19 Aug 2005)
New Revision: 1615
Modified:
data/CAN/list
Log:
fixed bugs
Modified: data/CAN/list
===================================================================
--- data/CAN/list 2005-08-19 19:28:36 UTC (rev 1614)
+++ data/CAN/list 2005-08-19 20:13:35 UTC (rev 1615)
@@ -452,7 +452,7 @@
CAN-2005-2549 (Multiple format string vulnerabilities in Evolution 1.5 through
...)
- evolution (unfixed; bug #322535; high)
CAN-2005-2547 (security.c in hcid for BlueZ 2.18 and earlier allows remote
attackers ...)
- - bluez-utils (unfixed; bug #323365; medium)
+ - bluez-utils 2.19-1 (bug #323365; medium)
CAN-2005-XXXX [centericq embeds libgadu, which had multiple vulns]
NOTE: Will be split once the maintainer has investigated this
- centericq (unfixed; bug #323185; medium)
@@ -767,9 +767,9 @@
CAN-2005-XXXX [wine: Unsafe use of temporary files in winelauncher]
- wine (unfixed; bug #321470; low)
CAN-2005-XXXX [inkscape: Unsafe temporary file handling in ps2epsi extension]
- - inkscape (unfixed; bug #321501; low)
+ - inkscape 0.42 (bug #321501; low)
CAN-2005-XXXX [DoS to users to prevent usage of showpartial through _hard_
links]
- - metamail (unfixed; bug #321473; low)
+ - metamail 2.7-48 (bug #321473; low)
CAN-2005-XXXX [Insecure usage of temporary files in x11perfcomp and other
security issues]
- xbase-clients (unfixed; bug #321447; low)
CAN-2005-XXXX [kdebase: startkde does not check lnusertemp's result?]
@@ -794,7 +794,7 @@
- tutos 1.1.20031017-2.1 (medium)
end claimed by neilm
CAN-2005-XXXX [libnet-ssleay-perl: /tmp/entropy insecure]
- - libnet-ssleay-perl (unfixed; bug #296112; low)
+ - libnet-ssleay-perl 1.25-1.1 (bug #296112; low)
CAN-2005-XXXX [nvi: init.d recover file security bugs]
- nvi 1.79-22 (medium)
CAN-2005-XXXX [bugzilla: Maintainer's postinst script use temporary files in
an unsafe way]
@@ -1353,7 +1353,7 @@
CAN-2005-XXXX [strobe reads file from unsafe directory]
- netdiag 0.7-7.1 (bug #206905; low)
CAN-2005-XXXX [Integer overflow in ffmpeg's MPEG encoding]
- - ffmpeg (unfixed; bug #320150; medium)
+ - ffmpeg 0.cvs20050811-1 (bug #320150; medium)
CAN-2005-XXXX [Further minor security issues in phpbb]
NOTE: Maintainers already preparing packages of 2.0.17
- phpbb2 (unfixed; low)
@@ -5353,7 +5353,7 @@
CAN-2005-XXXX [Possible SQL injection in freeradius]
- freeradius 1.0.2-4
CAN-2005-2353 (run-mozilla.sh in Thunderbird, with debugging enabled, allows
local ...)
- - mozilla-thunderbird (unfixed; bug #306893; low)
+ - mozilla-thunderbird 1.0.6-1 (bug #306893; low)
CAN-2005-XXXX [Directory traversal in unzoo]
- unzoo 4.4-4
CAN-2005-XXXX [Logging bypassing through SIGHUP in syslog-ng]
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
