Secure testing commits - Sep 2005 - r1822 - in data: CAN DSA

Author: jmm-guest
Date: 2005-09-05 17:13:42 +0000 (Mon, 05 Sep 2005)
New Revision: 1822

Modified:
   data/CAN/list
   data/DSA/list
Log:
new ntp dsa (please double-check, I''m not sure about this one)


Modified: data/CAN/list
==================================================================---
data/CAN/list	2005-09-05 12:38:43 UTC (rev 1821)
+++ data/CAN/list	2005-09-05 17:13:42 UTC (rev 1822)
@@ -1001,7 +1001,8 @@
 CAN-2005-2497
 	NOTE: reserved
 CAN-2005-2496 (The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u
option ...)
-	TODO: check
+	NOTE: I suspect DSA-801 is fixed by the non-root patches from Ubuntu??
+	- ntp 1:4.2.0a+stable-4 (medium)
 CAN-2005-2495
 	NOTE: reserved
 CAN-2005-2494

Modified: data/DSA/list
==================================================================---
data/DSA/list	2005-09-05 12:38:43 UTC (rev 1821)
+++ data/DSA/list	2005-09-05 17:13:42 UTC (rev 1822)
@@ -1,3 +1,7 @@
+[05 Sep 2005] DSA-801-1 ntp - programming error
+	{CAN-2005-2496}
+	- ntp 1:4.2.0a+stable-4 (medium)
+	NOTE: not fixed in testing at time of DSA (RC bugs)
 [02 Sep 2005] DSA-800-1 pcre3 - integer overflow
 	{CAN-2005-2491}
 	- pcre3 6.3-0.1etch1 (high)