Secure testing commits - May 2005 - r1156 - sarge-checks/CAN

Author: jmm-guest
Date: 2005-05-25 22:45:12 +0000 (Wed, 25 May 2005)
New Revision: 1156

Modified:
   sarge-checks/CAN/list
Log:
qpopper fixed
mainscanner bugnum


Modified: sarge-checks/CAN/list
==================================================================---
sarge-checks/CAN/list	2005-05-25 22:11:39 UTC (rev 1155)
+++ sarge-checks/CAN/list	2005-05-25 22:45:12 UTC (rev 1156)
@@ -90,7 +90,7 @@
 CAN-2005-1707 (The fn_show_postinst function in Gentoo webapp-config before
1.10-r14 ...)
 	NOTE: not-for-us (Gentoo)
 CAN-2005-1706 (Unknown vulnerability in MailScanner 4.41.3 and earlier, related
to ...)
-	- mailscanner (unfixed; bug filed)
+	- mailscanner (unfixed; bug #310774)
 CAN-2005-1705 (gdb before 6.3 searches the current working directory to load
the ...)
 	- gdb (unfixed; bug #310728)
 CAN-2005-1704 (Integer overflow in the BFD library for gdb before 6.3 allows
...)
@@ -2283,10 +2283,10 @@
 	- mozilla 1.7.7-1
 CAN-2005-1152 [Qpopper can be forced to create group or world writable files]
 	NOTE: reserved
-	- qpopper (unfixed)
+	- qpopper 4.0.5-4sarge1
 CAN-2005-1151 [Insufficient privilege drop in qpopper]
 	NOTE: reserved
-	- qpopper (unfixed)
+	- qpopper 4.0.5-4sarge1
 CAN-2005-1150 (Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and
...)
 	NOTE: not-for-us (Sun Java)
 CAN-2005-1149 (SQL injection vulnerability in admin/login.asp in aspclick.it
ACNews ...)