Author: jmm-guest
Date: 2005-08-04 12:37:59 +0000 (Thu, 04 Aug 2005)
New Revision: 1522
Modified:
data/CAN/list
Log:
texmacs/zlib fixes in experimental
obscure mod-ssl issue w/o more information
Modified: data/CAN/list
==================================================================---
data/CAN/list 2005-08-03 23:00:17 UTC (rev 1521)
+++ data/CAN/list 2005-08-04 12:37:59 UTC (rev 1522)
@@ -1338,8 +1338,8 @@
- lsb-rpm (unfixed; bug #318099; medium)
- rageircd 2.0.0-3sid1 (medium)
- systemimager-ssh (unfixed; bug #318101; medium)
- - texmacs 1.0.5-3 (bug #318100; medium)
- NOTE: texmacs does only link statically on alpha
+ - texmacs (unfixed; bug #318100; medium)
+ NOTE: fixed in experimental in 1:1.0.5.6-1, not yet in sid
CAN-2005-2095 (SquirrelMail 1.4.4 and earlier does not properly handle the
$_POST ...)
{DSA-756-1}
- squirrelmail (unfixed; #317094; medium)
@@ -4876,8 +4876,11 @@
CAN-2005-1269 (Gaim before 1.3.1 allows remote attackers to cause a denial of
service ...)
{DSA-734-1}
- gaim 1:1.3.1-1 (low)
-CAN-2005-1268
+CAN-2005-1268 [Off-by-one overflow in mod_ssl''s CRL verification call
back]
NOTE: reserved
+ NOTE: This is from latest Trustix advisory, exploitation would require to
trick
+ NOTE: someone into using a maliciously crafted certificate revocation list
+ - libapache-mod-ssl (unfixed; low)
CAN-2005-1267 (The bgp_update_print function in tcpdump 3.x does not properly
handle ...)
- tcpdump 3.9.0.cvs.20050614-1 (medium)
CAN-2005-1266 (Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote
attackers to ...)