Secure testing team - Dec 2005 - r3114 - data/DSA

Author: jmm-guest
Date: 2005-12-21 22:14:44 +0000 (Wed, 21 Dec 2005)
New Revision: 3114

Modified:
   data/DSA/list
Log:
new nbd DSA


Modified: data/DSA/list
==================================================================---
data/DSA/list	2005-12-20 21:45:52 UTC (rev 3113)
+++ data/DSA/list	2005-12-21 22:14:44 UTC (rev 3114)
@@ -1,3 +1,8 @@
+[21 Dec 2005] DSA-924-1 nbd - buffer overflow
+	{CVE-2005-4354}
+	[woody] - nbd 1.2cvs20020320-3.woody.3
+	[sarge] - nbd 2.7.3-3sarge1
+	NOTE: not fixed in testing at time of DSA (unfixed in sid)
 [19 Dec 2005] DSA-923-1 dropbear - buffer overflow
 	{CVE-2005-4178}
 	[sarge] - dropbear 0.45-2sarge0

* Moritz Muehlenhoff:
> +[21 Dec 2005] DSA-924-1 nbd - buffer overflow
> +	{CVE-2005-4354}
Is this entry the correct one?  The DSA references a Sylpheed issue,
which is clearly wrong.