Secure testing commits - Mar 2006 - r3576 - in data: CVE DSA

Author: jmm-guest
Date: 2006-03-10 09:06:42 +0000 (Fri, 10 Mar 2006)
New Revision: 3576

Modified:
   data/CVE/list
   data/DSA/list
Log:
bluez-hcidump DSA
kpdf regression


Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-03-09 21:14:23 UTC (rev 3575)
+++ data/CVE/list	2006-03-10 09:06:42 UTC (rev 3576)
@@ -642,8 +642,10 @@
 	RESERVED
 CVE-2006-0747
 	RESERVED
-CVE-2006-0746
+CVE-2006-0746 [kpdf security fix regression]
 	RESERVED
+	- kdegraphics 3.5.0-3
+	NOTE: Only affected the 3.3.2 KDE backport
 CVE-2006-0745
 	RESERVED
 CVE-2006-0744
@@ -831,7 +833,7 @@
 CVE-2006-0671 (Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i
cell ...)
 	NOT-FOR-US: Sony Ericsson
 CVE-2006-0670 (Buffer overflow in l2cap.c in hcidump 1.29 allows remote
attackers to ...)
-	- bluez-hcidump 1.30-1 (bug #351881)
+	- bluez-hcidump 1.30-1 (bug #351881; medium)
 CVE-2006-0669 (** DISPUTED ** ...)
 	NOT-FOR-US: Forum Light
 CVE-2006-0668 (SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows
remote ...)

Modified: data/DSA/list
==================================================================---
data/DSA/list	2006-03-09 21:14:23 UTC (rev 3575)
+++ data/DSA/list	2006-03-10 09:06:42 UTC (rev 3576)
@@ -1,3 +1,7 @@
+[10 Mar 2006] DSA-990-1 bluez-hcidump - programming error
+	{CVE-2006-0670}
+	[sarge] - bluez-hcidump 1.17-1sarge1
+	NOTE: fixed in testing at the time of DSA
 [08 Mar 2006] DSA-989-1 zoph - SQL injection
 	{CVE-2006-0402}
 	[sarge] - zoph 0.3.3-12sarge1