Secure testing commits - Oct 2008 - r10138 - data/CVE

Author: nion
Date: 2008-10-21 11:18:14 +0000 (Tue, 21 Oct 2008)
New Revision: 10138

Modified:
   data/CVE/list
Log:
CVE-2008-36[39-41] fixed in cups 1.3.8-1lenny2

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-10-21 11:08:38 UTC (rev 10137)
+++ data/CVE/list	2008-10-21 11:18:14 UTC (rev 10138)
@@ -2410,13 +2410,16 @@
 	NOT-FOR-US: Mac OS
 CVE-2008-3641 (The Hewlett-Packard Graphics Language (HPGL) filter in CUPS
before ...)
 	{DSA-1656-1}
-	TODO: check
+	- cupsys 1.3.8-1lenny2 (medium)
+	- cups 1.3.8-1lenny2 (medium)
 CVE-2008-3640 (Integer overflow in the WriteProlog function in texttops in CUPS
...)
 	{DSA-1656-1}
-	TODO: check
+	- cupsys 1.3.8-1lenny2 (medium)
+	- cups 1.3.8-1lenny2 (medium)
 CVE-2008-3639 (Heap-based buffer overflow in the read_rle16 function in
imagetops in ...)
 	{DSA-1656-1}
-	TODO: check
+	- cupsys 1.3.8-1lenny2 (medium)
+	- cups 1.3.8-1lenny2 (medium)
 CVE-2008-3638 (Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent
applets from ...)
 	NOT-FOR-US: Mac OSX
 CVE-2008-3637 (The Hash-based Message Authentication Code (HMAC) provider in
Java on ...)