Moritz Muehlenhoff
2010-Jan-04 18:45 UTC
[Secure-testing-commits] r13709 - in data: . CVE NMU
Author: jmm-guest
Date: 2010-01-04 18:44:59 +0000 (Mon, 04 Jan 2010)
New Revision: 13709
Modified:
data/CVE/list
data/NMU/list
data/embedded-code-copies
Log:
* collectd/ltdl fixed
* fckeditor code copy back in otrs2
* record lcms NMU
* tdom and paragui already use the system copy of expat
* remove explicit not-affected entry for apr-util/apache2 to
be conformant with other packages: If a system copy
has been fixed earlier than the current oldstable
release we don''t need to track the source package using
the library
* openssh fixed
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-01-04 07:46:02 UTC (rev 13708)
+++ data/CVE/list 2010-01-04 18:44:59 UTC (rev 13709)
@@ -2004,7 +2004,7 @@
- camserv <unfixed> (low; bug #559800)
[lenny] - camserv <no-dsa> (Minor issue)
[etch] - camserv <no-dsa> (Minor issue)
- - collectd <unfixed> (low; bug #559801)
+ - collectd 4.8.2-1 (low; bug #559801)
[lenny] - collectd <no-dsa> (Minor issue)
[etch] - collectd <no-dsa> (Minor issue)
- cvsnt <unfixed> (low; bug #559803)
@@ -2174,11 +2174,9 @@
[lenny] - wxwidgets2.8 <no-dsa> (minor issue)
- audacity 1.3.2-1 (unimportant; bug #560919)
- matanza <unfixed> (unimportant; bug #560920)
- - tdom <unfixed> (low; bug #560921)
+ - tdom 0.8.3~20080525-1 (low; bug #560921)
[etch] - tdom <no-dsa> (minor issue)
- [lenny] - tdom <no-dsa> (minor issue)
- udunits 2.1.8-4 (unimportant; bug #560922)
- - apr-util <not-affected> (links to system expat)
- ayttm 0.6.1-2 (low; bug #560924)
[etch] - ayttm <no-dsa> (minor issue)
[lenny] - ayttm <no-dsa> (minor issue)
@@ -2192,7 +2190,6 @@
- grmonitor <removed> (unimportant; bug #560931)
- iceape <unfixed> (unimportant; bug #560932)
- insighttoolkit 3.16.0-1 (unimportant; bug #560933)
- - libparagui1.1 <unfixed> (unimportant; bug #560934)
- paraview <unfixed> (unimportant; bug #560935)
- poco <unfixed> (unimportant; bug #560936)
- simgear <unfixed> (unimportant; bug #560937)
@@ -2215,7 +2212,6 @@
- kompozer 1:0.8~b1-2 (unimportant; bug #560944)
- vxl 1.13.0-2 (low; bug #560945)
- xulrunner <unfixed> (unimportant; bug #560946)
- - apache2 <not-affected> (links to system expat)
- texlive-bin <not-affected> (Files are not compiled in, see #560948)
- vnc4 <unfixed> (low; bug #560949)
[etch] - vnc4 <no-dsa> (minor issue)
@@ -2671,11 +2667,9 @@
[lenny] - wxwidgets2.8 <no-dsa> (minor issue)
- audacity 1.3.2-1 (unimportant; bug #560919)
- matanza <unfixed> (unimportant; bug #560920)
- - tdom <unfixed> (low; bug #560921)
+ - tdom 0.8.3~20080525-1 (low; bug #560921)
[etch] - tdom <no-dsa> (minor issue)
- [lenny] - tdom <no-dsa> (minor issue)
- udunits 2.1.8-4 (unimportant; bug #560922)
- - apr-util <not-affected> (links to system expat)
- ayttm 0.6.1-2 (low; bug #560924)
[etch] - ayttm <no-dsa> (minor issue)
[lenny] - ayttm <no-dsa> (minor issue)
@@ -2689,7 +2683,6 @@
- grmonitor <removed> (unimportant; bug #560931)
- iceape <unfixed> (unimportant; bug #560932)
- insighttoolkit 3.16.0-1 (unimportant; bug #560933)
- - libparagui1.1 <unfixed> (unimportant; bug #560934)
- paraview <unfixed> (unimportant; bug #560935)
- poco <unfixed> (unimportant; bug #560936)
- simgear <unfixed> (unimportant; bug #560937)
@@ -2712,7 +2705,6 @@
- kompozer 1:0.8~b1-2 (low; bug #560944)
- vxl 1.13.0-2 (low; bug #560945)
- xulrunner <unfixed> (unimportant; bug #560946)
- - apache2 <not-affected> (links to system expat)
- texlive-bin <not-affected> (Files are not compiled in, see #560948)
- vnc4 <unfixed> (low; bug #560949)
[etch] - vnc4 <no-dsa> (minor issue)
@@ -16767,7 +16759,7 @@
- kfreebsd-7 7.1-1
[lenny] - kfreebsd-7 7.0-7lenny1
CVE-2008-5161 (Error handling in the SSH protocol in (1) SSH Tectia Client and
Server ...)
- - openssh <unfixed> (low; bug #506115)
+ - openssh 1:5.2p1-1 (low; bug #506115)
[etch] - openssh <no-dsa> (Minor issue, see
http://www.openssh.org/txt/cbc.adv)
[lenny] - openssh <no-dsa> (Minor issue, see
http://www.openssh.org/txt/cbc.adv)
CVE-2008-5185 (The highlighting functionality in geshi.php in GeSHi before
1.0.8 ...)
Modified: data/NMU/list
==================================================================---
data/NMU/list 2010-01-04 07:46:02 UTC (rev 13708)
+++ data/NMU/list 2010-01-04 18:44:59 UTC (rev 13709)
@@ -181,4 +181,5 @@
2009-12-06 libstruts1.2-java 1.2.9-3.1
2009-12-16 cacti 0.8.7e-1.1
2009-12-24 poppler 0.12.2-2.1
+2009-12-26 lcms 1.18.dfsg-1.1
2010-01-02 phpldapadmin 1.1.0.7-1.1
Modified: data/embedded-code-copies
==================================================================---
data/embedded-code-copies 2010-01-04 07:46:02 UTC (rev 13708)
+++ data/embedded-code-copies 2010-01-04 18:44:59 UTC (rev 13709)
@@ -354,7 +354,7 @@
- karrigell <removed> (embed; bug #452598)
- gforge 4.6.99+svn6225-1 (embed)
- request-tracker3.8 <unfixed> (embed)
- - otrs2 2.4.5-3 (embed)
+ - otrs2 <unfixed> (embed)
ipatlas (not packaged in Debian)
- moodle <unfixed> (embed; bug #507185)
@@ -1102,7 +1102,7 @@
NOTE: Maybe that was fixed even earlier
- audacity 1.3.2-1 (embed)
- matanza <unfixed> (embed)
- - tdom <unfixed> (embed)
+ - tdom 0.8.3~20080525-1 (embed)
- udunits 2.1.8-4 (embed)
- apr-util 1.2 (embed)
- ayttm <unfxed> (embed; bug #561006)
@@ -1116,7 +1116,7 @@
- iceape <unfixed> (embed)
- insighttoolkit 3.16.0-1 (embed)
NOTE: insighttoolkit might''ve been fixed earlier
- - libparagui1.1 <unfixed> (embed)
+ - libparagui1.1 1.0.2-1 (embed)
- paraview <unfixed> (embed)
- poco <unfixed> (embed)
- simgear <unfixed> (embed)