Author: joeyh Date: 2004-12-10 09:14:37 -0700 (Fri, 10 Dec 2004) New Revision: 190 Modified: sarge-checks/CAN/list Log: automatic CAN database update Modified: sarge-checks/CAN/list ==================================================================--- sarge-checks/CAN/list 2004-12-09 21:59:25 UTC (rev 189) +++ sarge-checks/CAN/list 2004-12-10 16:14:37 UTC (rev 190) @@ -1,3 +1,38 @@ +CAN-2004-1171 + TODO: check +CAN-2004-1170 + TODO: check +CAN-2004-1169 + TODO: check +CAN-2004-1168 + TODO: check +CAN-2004-1167 + TODO: check +CAN-2004-1166 + TODO: check +CAN-2004-1165 + TODO: check +CAN-2004-1164 + TODO: check +CAN-2004-1163 + TODO: check +CAN-2004-1162 + TODO: check +CAN-2004-1161 + TODO: check +CAN-2004-1160 + TODO: check +CAN-2004-1159 + NOTE: rejected + TODO: check +CAN-2004-1158 + TODO: check +CAN-2004-1157 + TODO: check +CAN-2004-1156 + TODO: check +CAN-2004-1155 + TODO: check CAN-2004-1154 NOTE: reserved CAN-2004-1153 @@ -63,7 +98,7 @@ CAN-2004-1123 NOTE: not-for-us (Darwin Streaming Server) CAN-2004-1122 - NOTE: reserved + TODO: check CAN-2004-1121 NOTE: reserved CAN-2004-1120 @@ -177,7 +212,7 @@ NOTE: fixed in kernel team svn, 2.6 only issue TODO: make sure it gets to testing, add release version CAN-2004-1067 - NOTE: reserved + TODO: check CAN-2004-1066 NOTE: not-for-us (FreeBSD) CAN-2004-1065 @@ -262,7 +297,7 @@ CAN-2004-1027 NOTE: sarge''s unarj is from a different code base, probably not vulnerable CAN-2004-1026 - NOTE: reserved + TODO: check CAN-2004-1025 NOTE: reserved CAN-2004-1024 @@ -337,7 +372,6 @@ CAN-2004-0994 NOTE: reserved CAN-2004-0993 - NOTE: reserved {DSA-604-1} CAN-2004-0992 NOTE: not-for-us (Proxytunnel) @@ -524,7 +558,6 @@ {DSA-574-1} - cabextract 1.1-1 CAN-2004-0915 - NOTE: reserved {DSA-605-1} - viewcvs 0.9.2+cvs.1.0.dev.2004.07.28-1.2 CAN-2004-0914 @@ -3558,7 +3591,7 @@ CAN-2003-0467 NOTE: fixed in linux 2.4.21 CAN-2003-0466 - {DSA-357} + TODO: check CAN-2003-0465 strncpy in kernel does not pad with zeroes - kernel-source-2.4.27 (unfixed; bug #280492) NOTE: generic .c version fixed in 2.6.x but not in 2.4.x