Bug#378353: mantis: some more vulnerabilities

2006-08-01 Thread Moritz Muehlenhoff
Steven M. Christey wrote: > > Let's forward this to the relevant person at MITRE. Steven, could you > > please check, whether this might be a duplicate? > > Looks like a partial duplicate. CVE-2005-3337 lists two items, and the > second one appears to be a dupe of CVE-2005-2557 based on the Manti

Bug#378353: mantis: some more vulnerabilities

2006-07-19 Thread Steven M. Christey
On Wed, 19 Jul 2006, Moritz Muehlenhoff wrote: > Let's forward this to the relevant person at MITRE. Steven, could you > please check, whether this might be a duplicate? Looks like a partial duplicate. CVE-2005-3337 lists two items, and the second one appears to be a dupe of CVE-2005-2557 based

Bug#378353: mantis: some more vulnerabilities

2006-07-19 Thread Moritz Muehlenhoff
Thijs Kinkhorst wrote: > > mantis > > CVE-2005-3337 CVE-2006-0664 CVE-2006-0665 > > CVE-2006-0840 CVE-2006-0841 CVE-2006-1577 > > I've supplied updated packages for sid and sarge, addressing all > relevant issues. A short breakdown: Thank you very much! > CVE-2006-0840 - This was already addres

Bug#378353: mantis: some more vulnerabilities

2006-07-19 Thread Moritz Muehlenhoff
Thijs Kinkhorst wrote: [This is about mantis] > CVE-2005-3337 - This is a mistery; the description is vague and the > upstream CVS repository doesn't seem to provide a distinct fix. I > believe this might actually be a duplicate of another already fixed > issue, CVE-2005-2557. We really need more

Bug#378353: mantis: some more vulnerabilities

2006-07-19 Thread Thijs Kinkhorst
Hello Moritz et al., > mantis > CVE-2005-3337 CVE-2006-0664 CVE-2006-0665 > CVE-2006-0840 CVE-2006-0841 CVE-2006-1577 I've supplied updated packages for sid and sarge, addressing all relevant issues. A short breakdown: CVE-2006-1577 - Fixed with upstream patch in sarge and sid; CVE-2006-0840 - T

Bug#378353: mantis: some more vulnerabilities

2006-07-15 Thread Thijs Kinkhorst
Package: mantis Version: 0.19.2-5sarge2 Severity: important Tags: security Hello, While looking at the mantis security situation for sarge, I discovered that the following CVE id's have not yet been fixed in sid. I'm not yet sure of their status so I'm setting this as important now. CVE-2006-084