Author: joeyh
Date: 2004-12-03 19:48:59 -0700 (Fri, 03 Dec 2004)
New Revision: 172
Modified:
sarge-checks/CAN/list
sarge-checks/DSA/list
Log:
some more updates
Modified: sarge-checks/CAN/list
==================================================================---
sarge-checks/CAN/list 2004-12-04 02:35:21 UTC (rev 171)
+++ sarge-checks/CAN/list 2004-12-04 02:48:59 UTC (rev 172)
@@ -276,6 +276,7 @@
CAN-2004-0990
{DSA-602-1 DSA-601-1 DSA-591-1 DSA-589-1}
- libgd2 2.0.30-1
+ - libgd 1.8.4-36.1
CAN-2004-0989
{DSA-582-1}
CAN-2004-0988
@@ -399,6 +400,7 @@
CAN-2004-0941
{DSA-602-1 DSA-601-1}
- libgd2 2.0.33-1.1
+ - libgd 1.8.4-36.1
CAN-2004-0940
{DSA-594-1}
- apache 1.3.33-2
Modified: sarge-checks/DSA/list
==================================================================---
sarge-checks/DSA/list 2004-12-04 02:35:21 UTC (rev 171)
+++ sarge-checks/DSA/list 2004-12-04 02:48:59 UTC (rev 172)
@@ -7,11 +7,11 @@
[29 Nov 2004] DSA-602-1 libgd2 - integer overlow
{CAN-2004-0941 CAN-2004-0990}
NOTE: different from fixes from earlier DSA for these CANs; 2004-0941 new
- TODO: check
+ - libgd2 2.0.33-1.1
[29 Nov 2004] DSA-601-1 libgd1 - integer overflow
{CAN-2004-0941 CAN-2004-0990}
NOTE: different from fixes from earlier DSA for these CANs; 2004-0941 new
- TODO: check
+ - libgd 1.8.4-36.1
[25 Nov 2004] DSA-599-1 tetex-bin - integer overflows
{CAN-2004-0888}
- tetex-bin 2.0.2-23
@@ -67,8 +67,6 @@
- dhcp 2.0pl5-19.1
[03 Nov 2004] DSA-583-1 lvm10 - insecure temporary directory
{CAN-2004-0972}
- TODO: I thought this didn''t really matter because the script
- TODO: was not included in the binary package. Check or fix.
[02 Nov 2004] DSA-582-1 libxml - buffer overflow
{CAN-2004-0989}
- libxml 1.8.17-9
@@ -222,7 +220,7 @@
- kdelibs 4:3.2.3-3.sarge.1
[17 Aug 2004] DSA-538 rsync - unauthorised directory traversal and file access
- rsync 2.6.2-3
-[16 Aug 2004] DSA-537 ruby -- insecure file permissions
+[16 Aug 2004] DSA-537 ruby - insecure file permissions
{CAN-2004-0755}
- ruby1.8 1.8.1+1.8.2pre1-4
HELP: is ruby1.6 vulnerable?
@@ -586,7 +584,7 @@
HELP: No idea if this is fixed, we have a new upstream version
HELP: that came out after these advisories, but neither the debian nor
HELP: the upstream changelog seem to mention them.
- NOTE: Mailed maintainr.
+ NOTE: Mailed maintainer.
[16 Jan 2004] DSA-424 mc - buffer overflow
{CAN-2003-1023}
- mc 1:4.6.0-4.6.1-pre1-1