OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Thomas Lotterer
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-web Date: 23-Jun-2005 16:05:19
Branch: HEAD Handle: 2005062315051900
Modified files:
openpkg-web/security OpenPKG-SA-2005.011-shtool.txt
Log:
update list of affected and fixed releases and packages
Summary:
Revision Changes Path
1.2 +35 -12 openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt
============================================================================
$ cvs diff -u -r1.1 -r1.2 OpenPKG-SA-2005.011-shtool.txt
--- openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt 15 Jun 2005
13:40:27 -0000 1.1
+++ openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt 23 Jun 2005
14:05:19 -0000 1.2
@@ -3,7 +3,7 @@
OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
[EMAIL PROTECTED] [EMAIL PROTECTED]
-OpenPKG-SA-2005.011 15-Jun-2005
+OpenPKG-SA-2005.011 23-Jun-2005
________________________________________________________________________
Package: shtool
@@ -11,7 +11,7 @@
OpenPKG Specific: no
Affected Releases: Affected Packages: Corrected Packages:
-OpenPKG CURRENT <= shtool-2.0.1-20050324 >= shtool-2.0.2-20050615
+OpenPKG CURRENT <= shtool-2.0.1-20050324 >= shtool-2.0.2-20050615
<= openpkg-20050613-20050613 >=
openpkg-20050615-20050615
<= al-0.9.1-20040207 >= al-0.9.1-20050615
<= as-gui-0.7.7-20040920 >= as-gui-0.7.7-20050615
@@ -51,17 +51,40 @@
<= var-1.1.2-20041031 >= var-1.1.2-20050615
<= wml-2.0.9-20050613 >= wml-2.0.9-20050615
<= xds-0.9.2-20050603 >= xds-0.9.2-20050615
-OpenPKG 2.2 <= shtool-2.0.1-2.3.0 >= shtool-2.0.1-2.3.1
+
+OpenPKG 2.4 none N.A.
+
+OpenPKG 2.3 <= shtool-2.0.1-2.3.0 >= shtool-2.0.1-2.3.1
<= openpkg-2.3.2-2.3.2 >= openpkg-2.3.3-2.3.3
- FIXME
-OpenPKG 2.1 <= shtool-2.0.1-2.2.0 >= shtool-2.0.1-2.2.1
- <= openpkg-2.2.3-2.2.3 >= openpkg-2.2.4-2.2.4
- FIXME
-
-Affected Releases: Dependent Packages:
-OpenPKG CURRENT ...
-OpenPKG 2.2 ...
-OpenPKG 2.1 ...
+ <= al-0.9.1-2.3.0 >= al-0.9.1-2.3.1
+ <= cfg-0.9.9-2.3.0 >= cfg-0.9.9-2.3.1
+ <= ex-1.0.4-2.3.0 >= ex-1.0.4-2.3.1
+ <= fsl-1.6.0-2.3.1 >= fsl-1.6.0-2.3.2
+ <= getopt-20030307-2.3.0 >= getopt-20030307-2.3.1
+ <= iselect-1.3.0-2.3.0 >= iselect-1.3.0-2.3.1
+ <= l2-0.9.10-2.3.0 >= l2-0.9.10-2.3.1
+ <= lmtp2nntp-1.3.0-2.3.0 >= lmtp2nntp-1.3.0-2.3.1
+ <= lzo-1.08-2.3.0 >= lzo-1.08-2.3.1
+ <= lzop-1.01-2.3.0 >= lzop-1.01-2.3.1
+ <= mm-1.3.1-2.3.1 >= mm-1.3.1-2.3.1
+ <= newt-0.51.6.6-2.3.0 >= newt-0.51.6.6-2.3.1
+ <= nmap-3.81-2.3.0 >= nmap-3.81-2.3.1
+ <= openldap-2.2.23-2.3.0 >= openldap-2.2.23-2.3.1
+ <= php-4.3.10-2.3.1 >= php-4.3.10-2.3.2
+ <= php5-5.0.3-2.3.0 >= php5-5.0.3-2.3.1
+ <= pth-2.0.4-2.3.0 >= pth-2.0.4-2.3.1
+ <= sa-1.2.4-2.3.0 >= sa-1.2.4-2.3.1
+ <= shiela-1.1.5-2.3.0 >= shiela-1.1.5-2.3.1
+ <= sio-0.9.2-2.3.0 >= sio-0.9.2-2.3.1
+ <= snmpdx-0.2.10-2.3.0 >= snmpdx-0.2.10-2.3.1
+ <= str-0.9.10-2.3.0 >= str-0.9.10-2.3.1
+ <= uuid-1.2.0-2.3.0 >= uuid-1.2.0-2.3.1
+ <= val-0.9.3-2.3.0 >= val-0.9.3-2.3.1
+ <= var-1.1.2-2.3.0 >= var-1.1.2-2.3.1
+ <= wml-2.0.9-2.3.0 >= wml-2.0.9-2.3.1
+ <= xds-0.9.1-2.3.0 >= xds-0.9.1-2.3.1
+
+Dependent Packages: none
Description:
Eric Romang has discovered [1] that GNU shtool [0] insecurely creates
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [email protected]
