secure-testing/data/spu-candidates.txt

This file records minor security issues, which do not warrant a DSA,
but which could be fixed in a stable point update if people feel like
it. If someone wants to address these, please add a note about it
and get in contact with debian-release@lists.debian.org

--

audacity (CVE-2007-6061)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453283
notified maintainer

--

balsa (CVE-2007-5007)
http://bugzilla.gnome.org/attachment.cgi?id=95088&action=view
notified maintainer

--

beagle (CVE-2005-4791)
notified maintainer

--

blam (CVE-2005-4791)
notified maintainer

--

flac123 (CVE-2007-3507)
notified maintainer

--

libapache2-mod-perl2 (CVE-2007-1349)
http://svn.apache.org/viewvc?view=rev&revision=521584
#433549
notified maintainer

--

libcdio (CVE-2007-6613)
https://bugs.gentoo.org/show_bug.cgi?id=203777
http://savannah.gnu.org/bugs/?21910
http://lists.gnu.org/archive/html/libcdio-devel/2007-12/msg00009.html
http://cvs.savannah.gnu.org/viewvc/libcdio/src/iso-info.c?root=libcdio&r1=1.35&r2=1.36
http://cvs.savannah.gnu.org/viewvc/libcdio/src/cd-info.c?root=libcdio&r1=1.149&r2=1.150
http://cvs.savannah.gnu.org/viewvc/libcdio/src/iso-info.c?root=libcdio&r1=1.36&r2=1.37
http://cvs.savannah.gnu.org/viewvc/libcdio/src/cd-info.c?root=libcdio&r1=1.150&r2=1.151
notified maintainer

--

libpam-ssh (CVE-2007-0844)
#410236
notified maintainer

--


liferea (CVE-2005-4791)
notified maintainer

--

lighttpd (CVE-2007-3948)
#434888
Was accidentally omitted during DSA 1362, but doesn't warrant a DSA on it's own.
http://trac.lighttpd.net/trac/changeset/1873?format=diff&new=1873
http://trac.lighttpd.net/trac/ticket/1216
notified maintainer

--

linux-ftpd-ssl (CVE-2007-6263)
#454733
notified maintainer

--

mecab (CVE-2007-3231)
#429174
notified maintainer

--

mldonkey (CVE-2007-4100)
#435439
notified maintainer

---

proftpd-dfsg, proftpd (CVE-2007-2165)
update in progress

--

python2.4, python2.5 (CVE-2007-4965)
http://bugs.python.org/issue1179
notified maintainer

--

slocate (CVE-2007-0227)
#411937
notified maintainer

--

sylpheed (CVE-2007-2958)
#441854
http://www.colino.net/claws-mail/getpatchset.php3?ver=2.10.0cvs153 fixes the bug
notified maintainer

--

tomboy (CVE-2005-4790)
notified maintainer

--

vobcopy (CVE-2007-5718)
bug #448319
notified maintainer

--

zsh (CVE-2007-6209)
bug #454073)
notified maintainer

1	jmm-guest	7532	This file records minor security issues, which do not warrant a DSA,
2			but which could be fixed in a stable point update if people feel like
3			it. If someone wants to address these, please add a note about it
4			and get in contact with debian-release@lists.debian.org
5
6			--
7
8			audacity (CVE-2007-6061)
9			http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453283
10	nion	7768	notified maintainer
11	jmm-guest	7532
12			--
13
14	jmm-guest	7974	balsa (CVE-2007-5007)
15			http://bugzilla.gnome.org/attachment.cgi?id=95088&action=view
16	nion	7976	notified maintainer
17	jmm-guest	7974
18			--
19
20	jmm-guest	7873	beagle (CVE-2005-4791)
21	nion	7876	notified maintainer
22	jmm-guest	7873
23			--
24
25	jmm-guest	7553	blam (CVE-2005-4791)
26	nion	7768	notified maintainer
27	jmm-guest	7553
28			--
29
30	jmm-guest	7883	flac123 (CVE-2007-3507)
31	nion	7884	notified maintainer
32	jmm-guest	7883
33			--
34
35	jmm-guest	7870	libapache2-mod-perl2 (CVE-2007-1349)
36			http://svn.apache.org/viewvc?view=rev&revision=521584
37			#433549
38	nion	7876	notified maintainer
39	jmm-guest	7870
40			--
41
42	jmm-guest	7986	libcdio (CVE-2007-6613)
43			https://bugs.gentoo.org/show_bug.cgi?id=203777
44			http://savannah.gnu.org/bugs/?21910
45			http://lists.gnu.org/archive/html/libcdio-devel/2007-12/msg00009.html
46			http://cvs.savannah.gnu.org/viewvc/libcdio/src/iso-info.c?root=libcdio&r1=1.35&r2=1.36
47			http://cvs.savannah.gnu.org/viewvc/libcdio/src/cd-info.c?root=libcdio&r1=1.149&r2=1.150
48			http://cvs.savannah.gnu.org/viewvc/libcdio/src/iso-info.c?root=libcdio&r1=1.36&r2=1.37
49			http://cvs.savannah.gnu.org/viewvc/libcdio/src/cd-info.c?root=libcdio&r1=1.150&r2=1.151
50	nion	7988	notified maintainer
51	jmm-guest	7986
52			--
53
54	jmm-guest	7883	libpam-ssh (CVE-2007-0844)
55			#410236
56	nion	7884	notified maintainer
57	jmm-guest	7883
58			--
59
60	jmm-guest	7932
61	jmm-guest	7873	liferea (CVE-2005-4791)
62	nion	7876	notified maintainer
63	jmm-guest	7873
64			--
65
66	jmm-guest	7932	lighttpd (CVE-2007-3948)
67			#434888
68			Was accidentally omitted during DSA 1362, but doesn't warrant a DSA on it's own.
69			http://trac.lighttpd.net/trac/changeset/1873?format=diff&new=1873
70			http://trac.lighttpd.net/trac/ticket/1216
71	nion	7933	notified maintainer
72	jmm-guest	7932
73			--
74
75	jmm-guest	7554	linux-ftpd-ssl (CVE-2007-6263)
76			#454733
77	nion	7768	notified maintainer
78	jmm-guest	7554
79			--
80
81	jmm-guest	7847	mecab (CVE-2007-3231)
82			#429174
83	nion	7848	notified maintainer
84	jmm-guest	7847
85	jmm-guest	7856	--
86
87			mldonkey (CVE-2007-4100)
88			#435439
89	nion	7860	notified maintainer
90	jmm-guest	7856
91	jmm-guest	7847	---
92
93	nion	7781	proftpd-dfsg, proftpd (CVE-2007-2165)
94	jmm-guest	7801	update in progress
95	jmm-guest	7779
96			--
97
98	jmm-guest	7681	python2.4, python2.5 (CVE-2007-4965)
99			http://bugs.python.org/issue1179
100	nion	7768	notified maintainer
101	jmm-guest	7681
102			--
103
104	jmm-guest	7553	slocate (CVE-2007-0227)
105			#411937
106	nion	7768	notified maintainer
107	jmm-guest	7553
108			--
109
110	jmm-guest	7871	sylpheed (CVE-2007-2958)
111			#441854
112			http://www.colino.net/claws-mail/getpatchset.php3?ver=2.10.0cvs153 fixes the bug
113	nion	7876	notified maintainer
114	jmm-guest	7871
115			--
116
117	jmm-guest	7532	tomboy (CVE-2005-4790)
118	nion	7768	notified maintainer
119	jmm-guest	7532
120			--
121
122			vobcopy (CVE-2007-5718)
123			bug #448319
124	nion	7768	notified maintainer
125	jmm-guest	7532
126			--
127
128			zsh (CVE-2007-6209)
129			bug #454073)
130	nion	7768	notified maintainer
131