[Secure-testing-commits] r2212 - data/CAN

Moritz Muehlenhoff
Wed, 28 Sep 2005 21:16:30 -0000

Author: jmm-guest
Date: 2005-09-28 21:16:02 +0000 (Wed, 28 Sep 2005)
New Revision: 2212

Modified:
   data/CAN/list
Log:
some older issues from the BTS; bugnums; claim


Modified: data/CAN/list
==================================================================---
data/CAN/list	2005-09-28 21:14:17 UTC (rev 2211)
+++ data/CAN/list	2005-09-28 21:16:02 UTC (rev 2212)
@@ -1,3 +1,11 @@
+CAN-2005-XXXX [microcode.ctl downloads microcode w/o user confirmation]
+	- microcode.ctl <unfixed> (bug #282583; low)
+	NOTE: The validity of the microcode is ensure inside the CPU
+CAN-2005-XXXX [Unsafe user of snprintf() in icebreaker''s highscore
list]
+	- icebreaker <unfixed> (bug #297644; low)
+CAN-2001-XXXX [gnupg: inproper flagging of signatures as being local)
+	- gnupg 1.0.7-1 (bug #107374)
+begin claimed by jmm
 CAN-2005-3087 (The SecureW2 3.0 TLS implementation uses weak random number
generators ...)
 	TODO: check
 CAN-2005-3086 (Directory traversal vulnerability in admin/about.php in
contentServ ...)
@@ -52,6 +60,7 @@
 	TODO: check
 CAN-2005-3061 (Multiple stack-based buffer overflows in PowerArchiver 8.10
through ...)
 	TODO: check
+end claimed by jmm
 CAN-2003-XXXX [libsafe: does not prevent some exploit types]
 	TODO: We should push for removal, maintainer already voiced consent during
Sarge prep phase
 	- libsafe <unfixed> (bug #173227; medium)
@@ -66,7 +75,7 @@
 	- mysql-dfsg-4.1 4.1.11a -1 (bug #330164; medium)
 	- mysql-dfsg-5.0 <not-affected> (Was fixed before MySQL 5.0 was uploaded
into the archive)
 CAN-2005-XXXX [Possibly incorrect virtualiasation in php4]
-	- php4 <unfixed> (bug #317577; unknown)
+	- php4 <unfixed> (bug #317577; bug #330419; unknown)
 	NOTE: Maintainer can''t reproduce
 CAN-1999-XXXX [Insecure access control on GNU Mach''s IO ports]
 	- gnumach <unfixed> (bug #46709)
@@ -9887,7 +9896,7 @@
 	NOTE: fix between 2.6.11 and 2.6.12, see
 	NOTE:
http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1e01441051dda3bb01c455b6e20bce6d00563d82"
 	- kernel-source-2.6.8 <unfixed> (bug #295949; high)
-	- linux-2.6 <not-affected>
+	- linux-2.6 <not-affected> (Vulnerable code was removed betwen 2.6.11
and 2.6.12)
 CAN-2005-0448 (Race condition in the rmtree function in File::Path.pm in Perl
before ...)
 	{DSA-696-1}
 	- perl 5.8.4-7