Author: jmm-guest
Date: 2006-07-25 10:05:18 +0000 (Tue, 25 Jul 2006)
New Revision: 4453
Modified:
data/CVE/list
Log:
new shadow issue, maintainers already aware
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-07-24 18:37:04 UTC (rev 4452)
+++ data/CVE/list 2006-07-25 10:05:18 UTC (rev 4453)
@@ -738,7 +738,7 @@
{DSA-1119}
- hiki 0.8.6-1 (bug #378059; low)
CVE-2006-3378 (passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when
called ...)
- TODO: check
+ - shadow <unfixed>
CVE-2006-3377 (Cross-site scripting (XSS) vulnerability in JMB Software
AutoRank PHP ...)
NOT-FOR-US: JMB Software AutoRank PHP
CVE-2006-3376 (Integer overflow in player.c in libwmf 0.2.8.4, as used in
multiple ...)
@@ -16732,6 +16732,7 @@
- dar <not-affected> (zlib not used on unstrusted input, see #317989)
[woody] - bacula <not-affected> (Woody contains zlib 1.1, which is not
affected)
- bacula 1.36.3-2 (bug #318014; medium)
+ [sarge] - bacula <no-dsa> (Backups do not contain untrusted data)
[woody] - sash <not-affected> (Woody contains zlib 1.1, which is not
affected)
- sash 3.7-6 (bug #318246; bug #318069; medium)
[woody] - libphysfs <not-affected> (Woody contains zlib 1.1, which is
not affected)