Secure testing commits - Nov 2005 - r2834 - in data: CVE DSA

Author: jmm-guest
Date: 2005-11-22 22:18:36 +0000 (Tue, 22 Nov 2005)
New Revision: 2834

Modified:
   data/CVE/list
   data/DSA/list
Log:
sylpheed DSA


Modified: data/CVE/list
==================================================================---
data/CVE/list	2005-11-22 22:10:10 UTC (rev 2833)
+++ data/CVE/list	2005-11-22 22:18:36 UTC (rev 2834)
@@ -1151,10 +1151,10 @@
 	{DSA-901-1}
 	- gnump3d 2.9.8-1
 CVE-2005-3354 (Stack-based buffer overflow in the ldif_get_line function in
ldif.c of ...)
-	- sylpheed <unfixed> (bug #338434; medium)
+	- sylpheed 2.0.4-1 (bug #338434; medium)
 	- sylpheed-gtk1 1.0.6-1 (medium)
 	- sylpheed-claws 1.0.5-2 (bug #338436; medium)
-	- sylpheed-claws-gtk2 (bug #339529; medium)
+	- sylpheed-claws-gtk2 1.9.100-1 (bug #339529; medium)
 CVE-2005-3353 (The exif_read_data function in the Exif module in PHP before
4.4.1 ...)
 	- php4 <unfixed> (bug #339577; medium)
 	TODO: Check php5

Modified: data/DSA/list
==================================================================---
data/DSA/list	2005-11-22 22:10:10 UTC (rev 2833)
+++ data/DSA/list	2005-11-22 22:18:36 UTC (rev 2834)
@@ -1,3 +1,8 @@
+[22 Nov 2005] DSA-906-1 sylpheed - several
+	{CVE-2005-3354}
+	[woody] - sylpheed 0.7.4-4woody1
+	[sarge] - sylpheed 1.0.4-1sarge1
+	NOTE: not fixed in testing at time of DSA (too young 7/10, RC bugs)
 [22 Nov 2005] DSA-905-1 mantis - several
 	{CVE-2005-3091 CVE-2005-3335 CVE-2005-3336 CVE-2005-3338 CVE-2005-3339}
 	[woody] - mantis <not-affected> (Vulnerable code not present)