path: root/data/DSA/list

[02 Jan 2009] DSA-1695-1 ruby1.8 ruby1.9 - denial of service
	{CVE-2008-3443}
	[etch] - ruby1.9 1.9.0+20060609-1etch4
	[etch] - ruby1.8 1.8.5-4etch4
[02 Jan 2009] DSA-1694-1 xterm - remote code execution
	{CVE-2008-2383 CVE-2006-7236}
	[etch] - xterm 222-1etch3
[27 Dec 2008] DSA-1693-1 phppgadmin - several vulnerabilities
	{CVE-2007-2865 CVE-2007-5728 CVE-2008-5587}
	[etch] - phppgadmin 4.0.1-3.1etch1
[27 Dec 2008] DSA-1692-1 php-xajax - cross-site scripting
	{CVE-2007-2739}
	[etch] - php-xajax 0.2.4-2+etch1
[22 Dec 2008] DSA-1691-1 moodle - several vulnerabilities
	{CVE-2007-3555 CVE-2008-1502 CVE-2008-3325 CVE-2008-3326 CVE-2008-4796 CVE-2008-4810 CVE-2008-4811 CVE-2008-5432}
	[etch] - moodle 1.6.3-2+etch1
[22 Dec 2008] DSA-1690-1 avahi - denial of service
	{CVE-2007-3372 CVE-2008-5081}
	[etch] - avahi 0.6.16-3etch2
[21 Dec 2008] DSA-1689-1 proftpd-dfsg - Cross-Site Request Forgery
	{CVE-2008-4242}
	[etch] - proftpd-dfsg 1.3.0-19etch2
[20 Dec 2008] DSA-1688-1 courier-authlib - SQL injection
	{CVE-2008-2380 CVE-2008-2667}
	[etch] - courier-authlib 0.58-4+etch2
[15 Dec 2008] DSA-1687-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2008-3527 CVE-2008-3528 CVE-2008-4554 CVE-2008-4576 CVE-2008-4933 CVE-2008-4934 CVE-2008-5025 CVE-2008-5029 CVE-2008-5079 CVE-2008-5182 CVE-2008-5300}
	[etch] - fai-kernels 1.17+etch.23etch1
	[etch] - linux-2.6 2.6.18.dfsg.1-23etch1
	[etch] - user-mode-linux 2.6.18-1um-2etch.23etch1
[14 Dec 2008] DSA-1686-1 no-ip - arbitrary code execution
	{CVE-2008-5297}
	[etch] - no-ip 2.1.1-4+etch1
[12 Dec 2008] DSA-1685-1 uw-imap - multiple vulnerabilities
        {CVE-2008-5005 CVE-2008-5006}
        [etch] - uw-imap 7:2002edebian1-13.1+etch1
[10 Dec 2008] DSA-1684-1 lcms - multiple vulnerabilities
	{CVE-2008-5316 CVE-2008-5317}
	[etch] - lcms 1.15-1.1+etch1
[08 Dec 2008] DSA-1683-1 streamripper - potential code execution
	{CVE-2007-4337 CVE-2008-4829}
	[etch] - streamripper 1.61.27-1+etch1
[07 Dec 2008] DSA-1682-1 squirrelmail - cross site scripting
	{CVE-2008-2379}
	[etch] - squirrelmail 2:1.4.9a-3
[04 Dec 2008] DSA-1681-1 linux-2.6.24 - several vulnerabilities
	{CVE-2008-3528 CVE-2008-4554 CVE-2008-4576 CVE-2008-4618 CVE-2008-4933 CVE-2008-4934 CVE-2008-5025 CVE-2008-5029 CVE-2008-5134 CVE-2008-5182 CVE-2008-5300}
	[etch] - linux-2.6.24 2.6.24-6~etchnhalf.7
[04 Dec 2008] DSA-1680-1 clamav - potential code execution
	{CVE-2008-5050 CVE-2008-5314}
	[etch] - clamav 0.90.1dfsg-4etch16
[03 Dec 2008] DSA-1679-1 awstats - cross-site scripting
	{CVE-2008-3714 CVE-2008-5080}
	[etch] - awstats 6.5+dfsg-1+etch1
[03 Dec 2008] DSA-1678-1 perl - privilege escalation
	{CVE-2004-0452 CVE-2005-0448 CVE-2008-5302 CVE-2008-5303}
	[etch] - perl 5.8.8-7etch5
[02 Dec 2008] DSA-1677-1 cupsys - arbitrary code execution
	{CVE-2008-5286}
	[etch] - cupsys 1.2.7-4etch6
[01 Dec 2008] DSA-1676-1 flamethrower - denial of service
	{CVE-2008-5141}
	[etch] - flamethrower 0.1.8-1+etch1
[30 Nov 2008] DSA-1675-1 phpmyadmin - cross site scripting
	{CVE-2008-4326}
	[etch] - phpmyadmin 4:2.9.1.1-9
[30 Nov 2008] DSA-1674-1 jailer - denial of service
	{CVE-2008-5139}
	[etch] - jailer 0.4-9+etch1
[29 Nov 2008] DSA-1673-1 wireshark - several vulnerabilities
	{CVE-2008-3137 CVE-2008-3138 CVE-2008-3141 CVE-2008-3145 CVE-2008-3933 CVE-2008-4683 CVE-2008-4684 CVE-2008-4685}
	[etch] - wireshark 0.99.4-5.etch.3
[29 Nov 2008] DSA-1672-1 imlib2 - arbitrary code execution
	{CVE-2008-5187}
	[etch] - imlib2 1.3.0.0debian1-4+etch2
[24 Nov 2008] DSA-1671-1 iceweasel - several vulnerabilities
	{CVE-2008-0017 CVE-2008-4582 CVE-2008-5012 CVE-2008-5013 CVE-2008-5014 CVE-2008-5017 CVE-2008-5018 CVE-2008-5021 CVE-2008-5022 CVE-2008-5023 CVE-2008-5024}
	[etch] - iceweasel 2.0.0.18-0etch1
[24 Nov 2008] DSA-1670-1 enscript - arbitrary code execution
	{CVE-2008-3863 CVE-2008-4306}
	[etch] - enscript 1.6.4-11.1
[23 Nov 2008] DSA-1669-1 xulrunner - several vulnerabilities
	{CVE-2008-0016 CVE-2008-0017 CVE-2008-3835 CVE-2008-3836 CVE-2008-3837 CVE-2008-4058 CVE-2008-4059 CVE-2008-4060 CVE-2008-4061 CVE-2008-4062 CVE-2008-4065 CVE-2008-4066 CVE-2008-4067 CVE-2008-4068 CVE-2008-4069 CVE-2008-4582 CVE-2008-5012 CVE-2008-5013 CVE-2008-5014 CVE-2008-5017 CVE-2008-5018 CVE-2008-5021 CVE-2008-5022 CVE-2008-5023 CVE-2008-5024}
	[etch] - xulrunner 1.8.0.15~pre080614h-0etch1
[22 Nov 2008] DSA-1668-1 hf - execution of arbitrary code
	{CVE-2008-2378}
	[etch] - hf 0.7.3-4etch1
[19 Nov 2009] DSA-1667-1 python2.4 - several vulnerabilities
	{CVE-2008-2315 CVE-2008-3142 CVE-2008-3143 CVE-2008-3144}
	[etch] - python2.4 2.4.4-3+etch2
[17 Nov 2008] DSA-1666-1 libxml2 - several vulnerabilities
	{CVE-2008-4225 CVE-2008-4226}
	[etch] - libxml2 2.6.27.dfsg-6
[12 Nov 2008] DSA-1665-1 libcdaudio - heap overflow
	{CVE-2008-5030}
	[etch] - libcdaudio 0.99.12p2-2+etch1
[10 Nov 2008] DSA-1664-1 ekg - denial of service
	{CVE-2008-4776}
	[etch] - ekg 1:1.7~rc2-1etch2
[09 Nov 2008] DSA-1663-1 net-snmp - several vulnerabilities
	{CVE-2008-0960 CVE-2008-2292 CVE-2008-4309}
	[etch] - net-snmp 5.2.3-7etch4
[06 Nov 2008] DSA-1662-1 mysql-dfsg-5.0 - authorization bypass
	{CVE-2008-4098}
	[etch] - mysql-dfsg-5.0 5.0.32-7etch8
[29 Oct 2008] DSA-1661-1 openoffice.org - several vulnerabilities
	{CVE-2008-2237 CVE-2008-2238}
	[etch] - openoffice.org 2.0.4.dfsg.2-7etch6
[26 Oct 2008] DSA-1660-1 clamav - denial of service
	{CVE-2008-3912 CVE-2008-3913 CVE-2008-3914}
	[etch] - clamav 0.90.1dfsg-4etch15
[23 Oct 2008] DSA-1659-1 libspf2 - potential remote code execution
	{CVE-2008-2469}
	[etch] - libspf2 1.2.5-4+etch1
[22 Oct 2008] DSA-1658-1 dbus - denial of service
	{CVE-2008-3834}
	[etch] - dbus 1.0.2-1+etch2
[20 Oct 2008] DSA-1657-1 qemu - denial of service
	{CVE-2008-4553}
	[etch] - qemu 0.8.2-4etch2
[20 Oct 2008] DSA-1656-1 cupsys - several vulnerabilities
	{CVE-2008-3639 CVE-2008-3640 CVE-2008-3641}
	[etch] - cupsys 1.2.7-4etch5
[16 Oct 2008] DSA-1655-1 linux-2.6.24 - several vulnerabilities
	{CVE-2008-1514 CVE-2008-3525 CVE-2008-3831 CVE-2008-4113 CVE-2008-4445}
	[etch] - linux-2.6.24 2.6.24-6~etchnhalf.6
[14 Oct 2008] DSA-1654-1 libxml2 - execution of arbitrary code
	{CVE-2008-3529}
	[etch] - libxml2 2.6.27.dfsg-5
[13 Oct 2008] DSA-1653-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2007-6716 CVE-2008-1514 CVE-2008-3276 CVE-2008-3525 CVE-2008-3833 CVE-2008-4210 CVE-2008-4302}
	[etch] - fai-kernels 1.17+etch.22etch3
	[etch] - linux-2.6 2.6.18.dfsg.1-22etch3
	[etch] - user-mode-linux 2.6.18-1um-2etch.22etch3
[12 Oct 2008] DSA-1652-1 ruby1.9 - several vulnerabilities
	{CVE-2008-3655 CVE-2008-3656 CVE-2008-3657 CVE-2008-3790 CVE-2008-3905}
	[etch] - ruby1.9 1.9.0+20060609-1etch3
[12 Oct 2008] DSA-1651-1 ruby1.8 - several vulnerabilities
	{CVE-2008-3655 CVE-2008-3656 CVE-2008-3657 CVE-2008-3790 CVE-2008-3905}
	[etch] - ruby1.8 1.8.5-4etch3
[12 Oct 2008] DSA-1650-1 openldap2.3 - denial of service
	{CVE-2008-2952}
	[etch] - openldap2.3 2.3.30-5+etch2
[08 Oct 2008] DSA-1649-1 iceweasel - several vulnerabilities
	{CVE-2008-0016 CVE-2008-3835 CVE-2008-3836 CVE-2008-3837 CVE-2008-4058 CVE-2008-4059 CVE-2008-4060 CVE-2008-4061 CVE-2008-4062 CVE-2008-4065 CVE-2008-4066 CVE-2008-4067 CVE-2008-4068 CVE-2008-4069}
	[etch] - iceweasel 2.0.0.17-0etch1
[08 Oct 2008] DSA-1648-1 mon - insecure temporary files
	{CVE-2008-4477}
	[etch] - mon 0.99.2-9+etch2
[07 Oct 2008] DSA-1647-1 php5 - several vulnerabilities
	{CVE-2008-3658 CVE-2008-3659 CVE-2008-3660}
	[etch] - php5 5.2.0-8+etch13
[07 Oct 2008] DSA-1646-2 squid - array bounds check
	{CVE-2007-6239 CVE-2008-1612}
	[etch] - squid 2.6.5-6etch4
[06 Oct 2008] DSA-1645-1 lighttpd - various problems
	{CVE-2008-4298 CVE-2008-4359 CVE-2008-4360}
	[etch] - lighttpd 1.4.13-4etch11
[05 Oct 2008] DSA-1644-1 mplayer - integer overflows
	{CVE-2008-3827}
	[etch] - mplayer 1.0~rc1-12etch5
[05 Oct 2008] DSA-1643-1 feta - denial of service
	{CVE-2008-4440}
	[etch] - feta 1.4.15+etch1
[20 Sep 2008] DSA-1642-1 horde3 - cross site scripting
	{CVE-2008-3823 CVE-2008-3824}
	[etch] - horde3 3.1.3-4etch4
[20 Sep 2008] DSA-1641-1 phpmyadmin - several issues
	{CVE-2008-3197 CVE-2008-3456 CVE-2008-3457 CVE-2008-4096}
	[etch] - phpmyadmin 4:2.9.1.1-8
[20 Sep 2008] DSA-1640-1 python-django - cross site request forgery
	{CVE-2007-5712 CVE-2008-3909}
	[etch] - python-django 0.95.1-1etch2
[19 Sep 2008] DSA-1639-1 twiki - command execution
	{CVE-2008-3195}
	[etch] - twiki 1:4.0.5-9.1etch1
[16 Sep 2008] DSA-1638-1 openssh - denial of service
	{CVE-2006-5051 CVE-2008-4109}
	[etch] - openssh 1:4.3p2-9etch3
[15 Sep 2008] DSA-1637-1 git-core - buffer overflow
	{CVE-2008-3546}
	[etch] - git-core 1:1.4.4.4-2.1+etch1
[11 Sep 2008] DSA-1636-1 linux-2.6.24 - several vulnerabilities
	{CVE-2008-3272 CVE-2008-3275 CVE-2008-3276 CVE-2008-3526 CVE-2008-3534 CVE-2008-3535 CVE-2008-3792 CVE-2008-3915}
	[etch] - linux-2.6.24 2.6.24-6~etchnhalf.5
[10 Sep 2008] DSA-1635-1 freetype - multiple vulnerabilities
	{CVE-2008-1806 CVE-2008-1807 CVE-2008-1808}
	[etch] - freetype 2.2.1-5+etch3
[01 Sep 2008] DSA-1634-1 wordnet - arbitrary code execution
	{CVE-2008-2149 CVE-2008-3908}
	[etch] - wordnet 1:2.1-4+etch1
[01 Sep 2008] DSA-1633-1 slash - multiple vulnerabilities
	{CVE-2008-2231 CVE-2008-2553}
	[etch] - slash 2.2.6-8etch1
[26 Aug 2008] DSA-1632-1 tiff - arbitrary code execution
	{CVE-2008-2327}
	[etch] - tiff 3.8.2-7+etch1
[22 Aug 2008] DSA-1631-1 libxml2 - denial of service
	{CVE-2008-3281}
	[etch] - libxml2 2.6.27.dfsg-3
[21 Aug 2008] DSA-1630-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2007-6282 CVE-2008-0598 CVE-2008-2729 CVE-2008-2812 CVE-2008-2826 CVE-2008-2931 CVE-2008-3272 CVE-2008-3275}
	[etch] - fai-kernels 1.17+etch.22etch2
	[etch] - user-mode-linux 2.6.18-1um-2etch.22etch2
	[etch] - linux-2.6 2.6.18.dfsg.1-22etch2
[19 Aug 2008] DSA-1629-2 postfix - privilege escalation
	{CVE-2008-2936}
	[etch] - postfix 2.3.8-2+etch1
[18 Aug 2008] DSA-1629-1 postfix - privilege escalation
	{CVE-2008-2936}
	[etch] - postfix 2.3.8-2etch1
[10 Aug 2008] DSA-1628-1 pdns - DNS spoofing
	{CVE-2008-3337}
	[etch] - pdns 2.9.20-8+etch1
[04 Aug 2008] DSA-1627-2 opensc - smart card vulnerability
	{CVE-2008-2235 CVE-2008-3972}
	[etch] - opensc 0.11.1-2etch2
[01 Aug 2008] DSA-1626-1 httrack - arbitrary code execution
	{CVE-2008-3429}
	[etch] - httrack 3.40.4-3.1+etch1
[01 Aug 2008] DSA-1625-1 cupsys - arbitrary code execution
	{CVE-2008-0053 CVE-2008-1373 CVE-2008-1722}
	[etch] - cupsys 1.2.7-4etch4
[31 Jul 2008] DSA-1624-1 libxslt - arbitrary code execution
	{CVE-2008-2935}
	[etch] - libxslt 1.1.19-3
[31 Jul 2008] DSA-1623-1 dnsmasq - cache poisoning
	{CVE-2008-1447}
	[etch] - dnsmasq 2.35-1+etch4
[31 Jul 2008] DSA-1622-1 newsx - arbitrary code execution
	{CVE-2008-3252}
	[etch] - newsx 1.6-2etch1
[27 Jul 2008] DSA-1621-1 icedove - several vulnerabilities
	{CVE-2008-0304 CVE-2008-2785 CVE-2008-2798 CVE-2008-2799 CVE-2008-2802 CVE-2008-2803 CVE-2008-2807 CVE-2008-2809 CVE-2008-2811}
	[etch] - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1
[27 Jul 2008] DSA-1620-1 python2.5 - several vulnerabilities
	{CVE-2007-2052 CVE-2007-4965 CVE-2008-1679 CVE-2008-1721 CVE-2008-1887}
	[etch] - python2.5 2.5-5+etch1
[27 Jul 2008] DSA-1619-1 python-dns - DNS response spoofing
	{CVE-2008-1447 CVE-2008-4099}
	[etch] - python-dns 2.3.0-5.2+etch1
[26 Jul 2008] DSA-1618-1 ruby1.9 - several vulnerabilities
	{CVE-2008-2376 CVE-2008-2662 CVE-2008-2663 CVE-2008-2664 CVE-2008-2725 CVE-2008-2726}
	[etch] - ruby1.9 1.9.0+20060609-1etch2
[25 Jul 2008] DSA-1617-1 refpolicy - incompatible policy
	{CVE-2008-1447}
	[etch] - refpolicy 0.0.20061018-5.1+etch1
[24 Jul 2008] DSA-1616-2 clamav - denial of service
	{CVE-2008-2713 CVE-2008-3215}
	[etch] - clamav 0.90.1dfsg-3.1etch14
[23 Jul 2008] DSA-1615-1 xulrunner - several vulnerabilities
	{CVE-2008-2785 CVE-2008-2798 CVE-2008-2799 CVE-2008-2800 CVE-2008-2801 CVE-2008-2802 CVE-2008-2803 CVE-2008-2805 CVE-2008-2807 CVE-2008-2808 CVE-2008-2809 CVE-2008-2811 CVE-2008-2933}
	[etch] - xulrunner 1.8.0.15~pre080614d-0etch1
[23 Jul 2008] DSA-1614-1 iceweasel - several vulnerabilities
	{CVE-2008-2785 CVE-2008-2933 CVE-2008-3198}
	[etch] - iceweasel 2.0.0.16-0etch1
[22 Jul 2008] DSA-1613-1 libgd2 - multiple vulnerabilities
	{CVE-2007-2445 CVE-2007-3476 CVE-2007-3477 CVE-2007-3996}
	[etch] - libgd2 2.0.33-5.2etch1
[21 Jul 2008] DSA-1612-1 ruby1.8 - several vulnerabilities
	{CVE-2008-2376 CVE-2008-2662 CVE-2008-2663 CVE-2008-2664 CVE-2008-2725 CVE-2008-2726}
	[etch] - ruby1.8 1.8.5-4etch2
[16 Jul 2008] DSA-1611-1 afuse - privilege escalation
	{CVE-2008-2232}
	[etch] - afuse 0.1.1-1+etch1
[16 Jul 2008] DSA-1544-2 pdns-recursor - predictable randomness
	{CVE-2008-1637 CVE-2008-3217}
	[etch] - pdns-recursor 3.1.4-1+etch2
[15 Jul 2008] DSA-1610-1 gaim - execution of arbitrary code
	{CVE-2008-2927}
	[etch] - gaim 1:2.0.0+beta5-10etch1
[15 Jul 2008] DSA-1609-1 lighttpd - multiple DOS issues
	{CVE-2007-3948 CVE-2008-0983}
	[etch] - lighttpd 1.4.13-4etch9
[13 Jul 2008] DSA-1608-1 mysql-dfsg-5.0 - authorization bypass
	{CVE-2008-2079 CVE-2008-4097}
	[etch] - mysql-dfsg-5.0 5.0.32-7etch6
[11 Jul 2008] DSA-1607-1 iceweasel - several vulnerabilities
	{CVE-2008-2798 CVE-2008-2799 CVE-2008-2800 CVE-2008-2801 CVE-2008-2802 CVE-2008-2803 CVE-2008-2805 CVE-2008-2807 CVE-2008-2808 CVE-2008-2809 CVE-2008-2811}
	[etch] - iceweasel 2.0.0.15-0etch1
[09 Jul 2008] DSA-1606-1 poppler - execution of arbitrary code
	{CVE-2008-1693}
	[etch] - poppler 0.4.5-5.1etch3
[08 Jul 2008] DSA-1603-1 bind9 - cache poisoning
	{CVE-2008-1447}
	[etch] - bind9 1:9.3.4-2etch3
[05 Jul 2008] DSA-1602-1 pcre3 - arbitrary code execution
	{CVE-2008-2371}
	[etch] - pcre3 6.7+7.4-4
[04 Jul 2008] DSA-1601-1 wordpress - several vulnerabilities
	{CVE-2007-1599 CVE-2008-0664}
	[etch] - wordpress 2.0.10-1etch3
[01 Jul 2008] DSA-1600-1 sympa - denial of service
	{CVE-2008-1648}
	[etch] - sympa 5.2.3-1.2+etch1
[26 Jun 2008] DSA-1599-1 dbus
	{CVE-2008-0595}
	[etch] - dbus 1.0.2-1+etch1
[19 Jun 2008] DSA-1598-1 libtk-img - arbitrary code execution
	{CVE-2008-0553}
	[etch] - libtk-img 1:1.3-15etch2
[12 Jun 2008] DSA-1597-1 mt-daapd - several vulnerabilities
	{CVE-2007-5824 CVE-2007-5825 CVE-2008-1771}
	[etch] - mt-daapd 0.2.4+r1376-1.1+etch1
[12 Jun 2008] DSA-1596-1 typo3-src - several vulnerabilities
	{CVE-2008-2717 CVE-2008-2718}
	[etch] - typo3-src 4.0.2+debian-5
[11 Jun 2008] DSA-1595-1 xorg-server - several vulnerabilities
	{CVE-2008-1377 CVE-2008-1379 CVE-2008-2360 CVE-2008-2361 CVE-2008-2362}
	[etch] - xorg-server 2:1.1.1-21etch5
[10 Jun 2008] DSA-1594-1 imlib2
	{CVE-2008-2426}
	[etch] - imlib2 1.3.0.0debian1-4+etch1
[09 Jun 2008] DSA-1593-1 tomcat5.5
	{CVE-2008-1947}
	[etch] - tomcat5.5 5.5.20-2etch3
[09 Jun 2008] DSA-1592-1 linux-2.6 - overflow conditions
	{CVE-2008-1673 CVE-2008-2358}
	[etch] - linux-2.6 2.6.18.dfsg.1-18etch6
[03 Jun 2008] DSA-1591-1 libvorbis - several vulnerabilities
	{CVE-2008-1419 CVE-2008-1420 CVE-2008-1423}
	[etch] - libvorbis 1.1.2.dfsg-1.4
[30 May 2008] DSA-1590-1 samba - arbitrary code execution
	{CVE-2008-1105}
	[etch] - samba 3.0.24-6etch10
[29 May 2008] DSA-1589-1 libxslt - arbitrary code execution
	{CVE-2008-1767}
	[etch] - libxslt 1.1.19-2
[27 May 2008] DSA-1588-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2007-6712 CVE-2008-1615 CVE-2008-2136 CVE-2008-2137}
	[etch] - linux-2.6 2.6.18.dfsg.1-18etch5
	[etch] - fai-kernels 1.17+etch.18etch5
	[etch] - user-mode-linux 2.6.18-1um-2etch.18etch5
[26 May 2008] DSA-1587-1 mtr - execution of arbitrary code
	{CVE-2008-2357}
	[etch] - mtr 0.71-2etch1
[22 May 2008] DSA-1586-1 xine-lib - multiple vulnerabilities
	{CVE-2008-1482 CVE-2008-1686 CVE-2008-1878}
	[etch] - xine-lib 1.1.2+dfsg-7
[21 May 2008] DSA-1585-1 speex - integer overflow
	{CVE-2008-1686}
	[etch] - speex 1.1.12-3etch1
[21 May 2008] DSA-1584-1 libfishsound - integer overflow
	{CVE-2008-1686}
	[etch] - libfishsound 0.7.0-2etch1
[20 May 2008] DSA-1583-1 gnome-peercast - several vulnerabilities
	{CVE-2007-6454 CVE-2008-2040}
	[etch] - gnome-peercast 0.5.4-1.1etch0
[20 May 2008] DSA-1582-1 peercast - arbitrary code execution
	{CVE-2008-2040}
	[etch] - peercast 0.1217.toots.20060314-1etch1
[20 May 2008] DSA-1581-1 gnutls13 - potential code execution
	{CVE-2008-1948 CVE-2008-1949 CVE-2008-1950}
	[etch] - gnutls13 1.4.4-3+etch1
[20 May 2008] DSA-1580-1 phpgedview - privilege escalation
	{CVE-2008-2064}
	[etch] - phpgedview 4.0.2.dfsg-4
[18 May 2008] DSA-1579-1 netpbm-free - arbitrary code execution
	{CVE-2008-0554}
	[etch] - netpbm-free 2:10.0-11.1+etch1
[17 May 2008] DSA-1578-1 php4 - several vulnerabilities
	{CVE-2007-3799 CVE-2007-3806 CVE-2007-3998 CVE-2007-4657 CVE-2008-2051}
	[etch] - php4 6:4.4.4-8+etch6
[14 May 2008] DSA-1577-1 gforge - insecure temporary files
	{CVE-2008-0167}
	[etch] - gforge 4.5.14-22etch8
[14 May 2008] DSA-1576-1 openssh openssh-blacklist - predictable randomness
	{CVE-2007-4752 CVE-2008-0166 CVE-2008-1483 CVE-2008-2285}
        [etch] - openssh 1:4.3p2-9etch2
	NOTE: The package should not be flagged as vulnerable because this is just
	NOTE: a band-aid for DSA-1571-1.
[12 May 2008] DSA-1575-1 linux-2.6 - denial of service
	{CVE-2008-1669}
	[etch] - linux-2.6 2.6.18.dfsg.1-18etch4
[12 May 2008] DSA-1574-1 icedove - several vulnerabilities
	{CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237}
	[etch] - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch1
[11 May 2008] DSA-1573-1 rdesktop - several vulnerabilities
	{CVE-2008-1801 CVE-2008-1802 CVE-2008-1803}
	[etch] - rdesktop 1.5.0-1etch2
[11 May 2008] DSA-1572-1 php5 - several vulnerabilities
	{CVE-2007-3806 CVE-2008-1384 CVE-2008-2050 CVE-2008-2051}
	[etch] - php5 5.2.0-8+etch11
[13 May 2008] DSA-1571-1 openssl - predictable random number generator
	{CVE-2007-3108 CVE-2007-4995 CVE-2008-0166}
	[etch] - openssl 0.9.8c-4etch3
[06 May 2008] DSA-1570-1 kazehakase - execution of arbitrary code
	{CVE-2006-7227 CVE-2006-7228 CVE-2006-7230 CVE-2007-1659 CVE-2007-1660 CVE-2007-1661 CVE-2007-1662 CVE-2007-4766 CVE-2007-4767 CVE-2007-4768}
	[etch] - kazehakase 0.4.2-1etch1
[05 May 2008] DSA-1569-1 cacti - multiple vulnerabilities
	{CVE-2008-0783 CVE-2008-0785}
	[etch] - cacti 0.8.6i-3.3
[05 May 2008] DSA-1568-1 b2evolution - cross site scripting
	{CVE-2007-0175}
	[etch] - b2evolution 0.9.2-3+etch1
[05 May 2008] DSA-1567-1 blender - arbitrary code execution
	{CVE-2008-1102}
	[etch] - blender 2.42a-7.1+etch1
[02 May 2008] DSA-1566-1 cpio - programming error
	{CVE-2007-4476}
	[etch] - cpio 2.6-18.1+etch1
[01 May 2008] DSA-1565-1 linux-2.6 - several vulnerabilities
	{CVE-2008-1375 CVE-2008-1294 CVE-2007-6694 CVE-2008-0007}
	[etch] - linux-2.6 2.6.18.dfsg.1-18etch3
[01 May 2008] DSA-1564-1 wordpress - several vulnerabilities
	{CVE-2008-2146 CVE-2007-0540 CVE-2007-3639 CVE-2007-4153 CVE-2007-4154}
	[etch] - wordpress 2.0.10-1etch2
[30 Apr 2008] DSA-1563-1 asterisk - denial of service
	{CVE-2008-1897}
	[etch] - asterisk 1:1.2.13~dfsg-2etch4
[28 Apr 2008] DSA-1562-1 iceape - arbitrary code execution
	{CVE-2008-1380}
	[etch] - iceape 1.0.13~pre080323b-0etch3
[28 Apr 2008] DSA-1561-1 ltsp - information disclosure
	{CVE-2008-1293}
	[etch] - ltsp 0.99debian11+etch1
[28 Apr 2008] DSA-1560-1 kronolith2 - cross site scripting
	{CVE-2008-1974}
	[etch] - kronolith2 2.1.4-1etch1
[27 Apr 2008] DSA-1559-1 phpgedview - cross site scripting
	{CVE-2007-5051}
	[etch] - phpgedview 4.0.2.dfsg-3
[24 Apr 2008] DSA-1558-1 xulrunner - arbitrary code execution
	{CVE-2008-1380}
	[etch] - xulrunner 1.8.0.15~pre080323b-0etch2
[24 Apr 2008] DSA-1534-2 iceape - regression
	{CVE-2007-3738 CVE-2007-4879 CVE-2007-5338 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1240 CVE-2008-1241}
	[etch] - iceape 1.0.13~pre080323b-0etch2
[24 Apr 2008] DSA-1557-1 phpmyadmin - several vulnerabilities
	{CVE-2008-1149 CVE-2008-1567 CVE-2008-1924}
	[etch] - phpmyadmin 4:2.9.1.1-7
[24 Apr 2008] DSA-1556-2 perl - denial of service
	{CVE-2008-1927}
	[etch] - perl 5.8.8-7etch3
[23 Apr 2008] DSA-1555-1 iceweasel - arbitrary code execution
	{CVE-2008-1380}
	[etch] - iceweasel 2.0.0.14-0etch1
[22 Apr 2008] DSA-1554-1 roundup - cross-site scripting vulnerability
	{CVE-2008-1474}
	[etch] - roundup 1.2.1-5+etch1
[20 Apr 2008] DSA-1553-1 ikiwiki - cross-site request forgery
	{CVE-2008-0165}
	[etch] - ikiwiki 1.33.5
[19 Apr 2008] DSA-1552-1 mplayer - arbitrary code execution
	{CVE-2008-1558}
	[etch] - mplayer 1.0~rc1-12etch3
[19 Apr 2008] DSA-1551-1 python2.4 - several vulnerabilities
	{CVE-2007-2052 CVE-2007-4965 CVE-2008-1679 CVE-2008-1721 CVE-2008-1887}
	[etch] - python2.4 2.4.4-3+etch1
[17 Apr 2008] DSA-1550-1 suphp
	{CVE-2008-1614}
	[etch] - suphp 0.6.2-1+etch0
[17 Apr 2008] DSA-1549-1 clamav
	{CVE-2008-0314 CVE-2008-1100 CVE-2008-1833}
	[etch] - clamav 0.90.1dfsg-3etch11
[17 Apr 2008] DSA-1548-1 xpdf
	{CVE-2008-1693}
	[etch] - xpdf 3.01-9.1+etch3
[17 Apr 2008] DSA-1547-1 openoffice.org
	{CVE-2007-5745 CVE-2007-5746 CVE-2007-5747 CVE-2008-0320}
	[etch] - openoffice.org 2.0.4.dfsg.2-7etch5
	[sarge] - openoffice.org 1.1.3-9sarge9
[10 Apr 2008] DSA-1546-1 gnumeric
	{CVE-2008-0668}
	[etch] - gnumeric 1.6.3-5.1+etch1
[10 Apr 2008] DSA-1545-1 rsync
	{CVE-2008-1720}
	[etch] - rsync 2.6.9-2etch2
[09 Apr 2008] DSA-1544-1 pdns-recursor - cache poisoning vulnerability
	{CVE-2008-1637}
	[etch] - pdns-recursor 3.1.4-1+etch1
[09 Apr 2008] DSA-1543-1 vlc - several vulnerabilities
	{CVE-2007-6681 CVE-2007-6682 CVE-2007-6683 CVE-2008-0073 CVE-2008-0295 CVE-2008-0296 CVE-2008-0984 CVE-2008-1489}
	[etch] - vlc 0.8.6-svn20061012.debian-5.1+etch2
[09 Apr 2008] DSA-1542-1 libcairo - arbitrary code execution
	{CVE-2007-5503}
	[etch] - libcairo 1.2.4-4.1+etch1
[08 Apr 2008] DSA-1541-1 openldap2.3
	{CVE-2007-5707 CVE-2007-5708 CVE-2007-6698 CVE-2008-0658}
	[etch] - openldap2.3 2.3.30-5+etch1
[07 Apr 2008] DSA-1540-1 lighttpd
	{CVE-2008-1531}
	[etch] - lighttpd 1.4.13-4etch7
[04 Apr 2008] DSA-1539-1 mapserver - multiple vulnerabilities
	{CVE-2007-4542 CVE-2007-4629}
	[etch] - mapserver 4.10.0-5.1+etch2
[04 Apr 2008] DSA-1538-1 alsaplayer - arbitrary code execution
	{CVE-2007-5301}
	[etch] - alsaplayer 0.99.76-9+etch1
[02 Apr 2008] DSA-1537-1 xpdf
	{CVE-2007-4352 CVE-2007-5392 CVE-2007-5393}
	[etch] - xpdf 3.01-9.1+etch2
[01 Apr 2008] DSA-1533-2 exiftags
	{CVE-2007-6354 CVE-2007-6355 CVE-2007-6356}
	[sarge] - exiftags 0.98-1.1+0sarge1
[31 Mar 2008] DSA-1536-1 xine-lib - several vulnerabilities
	{CVE-2007-1246 CVE-2007-1387 CVE-2008-0073 CVE-2008-0486 CVE-2008-1161}
	[sarge] - xine-lib 1.0.1-1sarge7
	[etch] - xine-lib 1.1.2+dfsg-6
[30 Mar 2008] DSA-1535-1 iceweasel
	{CVE-2007-4879 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1240 CVE-2008-1241}
	[etch] - iceweasel 2.0.0.13-0etch1 
[28 Mar 2008] DSA-1534-1 iceape
	{CVE-2007-4879 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1240 CVE-2008-1241}
	[etch] - iceape 1.0.13~pre080323b-0etch1
[27 Mar 2008] DSA-1533-1 exiftags
	{CVE-2007-6354 CVE-2007-6355 CVE-2007-6356}
	[etch] - exiftags 0.98-1.1+etch1
[27 Mar 2008] DSA-1532-1 xulrunner
	{CVE-2007-4879 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1240 CVE-2008-1241}
	[etch] - xulrunner 1.8.0.15~pre080323b-0etch1
[27 Mar 2008] DSA-1531-2 policyd-weight - insecure temporary files
	{CVE-2008-1569 CVE-2008-1570}
	[etch] - policyd-weight 0.1.14-beta-6etch2
[25 Mar 2008] DSA-1530-1 cupsys - multiple vulnerabilities
	{CVE-2008-0047 CVE-2008-0882}
	[etch] - cupsys 1.2.7-4etch3
[24 Mar 2008] DSA-1528-1 serendipity - cross site scripting
	{CVE-2007-6205 CVE-2008-0124 CVE-2008-1476}
	[etch] - serendipity 1.0.4-1+etch1
[24 Mar 2008] DSA-1527-1 debian-goodies - privilege escalation
	{CVE-2007-3912}
	[sarge] - debian-goodies 0.23+sarge1
	[etch] - debian-goodies 0.27+etch1
[20 Mar 2008] DSA-1526-1 xwine
	{CVE-2008-0930 CVE-2008-0931}
	[etch] - xwine 1.0.1-1etch1
[20 Mar 2008] DSA-1525-1 asterisk
	{CVE-2007-6430 CVE-2008-1332 CVE-2008-1333}
	[etch] - asterisk 1:1.2.13~dfsg-2etch3
[18 Mar 2008] DSA-1524-1 krb5 - multiple vulnerabilities
	{CVE-2008-0062 CVE-2008-0063 CVE-2008-0947}
	[sarge] - krb5 1.3.6-2sarge6
	[etch] - krb5 1.4.4-7etch5
[17 Mar 2008] DSA-1523-1 ikiwiki - cross-site scripting
	{CVE-2008-0808 CVE-2008-0809}
	[etch] - ikiwiki 1.33.4
[17 Mar 2008] DSA-1522-1 unzip - potential code execution
	{CVE-2008-0888}
	[sarge] - unzip 5.52-1sarge5
	[etch] - unzip 5.52-9etch1
[16 Mar 2008] DSA-1493-2 sdl-image1.2 - arbitrary code execution
	{CVE-2007-6697 CVE-2008-0544}
	[sarge] - sdl-image1.2 1.2.4-1etch1
	[etch] - sdl-image1.2 1.2.5-2+etch1
[16 Mar 2008] DSA-1521-1 lighttpd - arbitrary file disclosure
	{CVE-2008-1270}
	[etch] - lighttpd 1.4.13-4etch6
[16 Mar 2008] DSA-1520-1 smarty - arbitrary code execution
	{CVE-2008-1066}
	[sarge] - smarty 2.6.9-1sarge1
	[etch] - smarty 2.6.14-1etch1
[15 Mar 2008] DSA-1519-1 horde3 - information disclosure
	{CVE-2008-1284}
	[sarge] - horde3 3.0.4-4sarge7
	[etch] - horde3 3.1.3-4etch3
[15 Mar 2008] DSA-1518-1 backup-manager - information disclosure
	{CVE-2007-4656}
	[sarge] - backup-manager 0.5.7-1sarge2
	[etch] - backup-manager 0.7.5-4
[15 Mar 2008] DSA-1517-1 ldapscripts - information disclosure
	{CVE-2007-5373}
	[etch] - ldapscripts 1.4-2etch1
[14 Mar 2008] DSA-1516-1 dovecot - privilege escalation
	{CVE-2008-1199 CVE-2008-1218}
	[etch] - dovecot 1.0.rc15-2etch4
[11 Mar 2008] DSA-1515-1 libnet-dns-perl - several vulnerabilities
	{CVE-2007-3377 CVE-2007-3409 CVE-2007-6341}
	[sarge] - libnet-dns-perl 0.48-1sarge1
	[etch] - libnet-dns-perl 0.59-1etch1
[09 Mar 2008] DSA-1514-1 moin
	{CVE-2007-2423 CVE-2007-2637 CVE-2008-0780 CVE-2008-0781 CVE-2008-0782 CVE-2008-1098 CVE-2008-1099}
	[etch] - moin 1.5.3-1.2etch1
[06 Mar 2008] DSA-1513-1 lighttpd - information disclosure
	{CVE-2008-1111}
	[etch] - lighttpd 1.4.13-4etch5
[06 Mar 2008] DSA-1503-2 kernel-source-2.4.27 - several vulnerabilities
	{CVE-2004-2731 CVE-2006-4814 CVE-2006-5753 CVE-2006-5823 CVE-2006-6053 CVE-2006-6054 CVE-2006-6106 CVE-2007-1353 CVE-2007-1592 CVE-2007-2172 CVE-2007-2525 CVE-2007-3848 CVE-2007-4308 CVE-2007-4311 CVE-2007-5093 CVE-2007-6063 CVE-2007-6151 CVE-2007-6206 CVE-2007-6694 CVE-2008-0007}
	[sarge] - kernel-source-2.4.27 2.4.27-10sarge7
[05 Mar 2008] DSA-1512-1 evolution - remote code execution
	{CVE-2008-0072}
	[sarge] - evolution 2.0.4-2sarge3
	[etch] - evolution 2.6.3-6etch2
[03 Mar 2008] DSA-1511-1 icu - multiple problems
	{CVE-2007-4770 CVE-2007-4771}
	[etch] - icu 3.6-2etch1
[27 Feb 2008] DSA-1510-1 gs-esp gs-gpl - arbitrary code execution
	{CVE-2008-0411}
	[sarge] - gs-esp 7.07.1-9sarge1
	[sarge] - gs-gpl 8.01-6
	[etch] - gs-esp 8.15.3.dfsg.1-1etch1
	[etch] - gs-gpl 8.54.dfsg.1-5etch1
[25 Feb 2008] DSA-1509-1 koffice - multiple vulnerabilities
	{CVE-2007-4352 CVE-2007-5392 CVE-2007-5393}
	[etch] - koffice 1:1.6.1-2etch2
[25 Feb 2008] DSA-1508-1 sword - arbirary shell command execution
	{CVE-2008-0932}
	[sarge] - sword 1.5.7-7sarge1
	[etch] - sword 1.5.9-2etch1
[24 Feb 2008] DSA-1507-1 turba2
	{CVE-2008-0807}
	[sarge] - turba2 2.0.2-1sarge1
	[etch] - turba2 2.1.3-1etch1
[24 Feb 2008] DSA-1506-1 iceape - several vulnerabilities
	{CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594 CVE-2007-5947 CVE-2007-5959 CVE-2007-5960}
	[etch] - iceape 1.0.12~pre080131b-0etch1
[22 Feb 2008] DSA-1505-1 alsa-driver alsa-modules-i386 - kernel memory leak
	{CVE-2007-4571}
	[sarge] - alsa-driver 1.0.8-7sarge1
	[sarge] - alsa-modules-i386 1.0.8+2sarge2
	[etch] - alsa-driver 1.0.13-5etch1
[22 Feb 2008] DSA-1504-1 kernel-image-2.6.8 - several issues
	{CVE-2006-5823 CVE-2006-6054 CVE-2006-6058 CVE-2006-7203 CVE-2007-1353 CVE-2007-2172 CVE-2007-2525 CVE-2007-3105 CVE-2007-3739 CVE-2007-3740 CVE-2007-3848 CVE-2007-4133 CVE-2007-4308 CVE-2007-4573 CVE-2007-5093 CVE-2007-6063 CVE-2007-6151 CVE-2007-6206 CVE-2007-6694 CVE-2008-0007}
	[sarge] - kernel-image-2.6.8-s390 2.6.8-6sarge1
	[sarge] - kernel-image-2.6.8-ia64 2.6.8-15sarge1
	[sarge] - fai-kernels 1.9.1sarge8
	[sarge] - kernel-image-2.6.8-amd64 2.6.8-17sarge1
	[sarge] - kernel-image-2.6.8-hppa 2.6.8-7sarge1
	[sarge] - kernel-image-2.6.8-sparc 2.6.8-16sarge1
	[sarge] - kernel-image-2.6.8-alpha 2.6.8-17sarge1
	[sarge] - kernel-image-2.6.8-i386 2.6.8-17sarge1
	[sarge] - kernel-source-2.6.8 2.6.8-17sarge1
	[sarge] - kernel-patch-powerpc-2.6.8 2.6.8-13sarge1
	[sarge] - kernel-image-2.6.8-m68k 2.6.8-5sarge1
[22 Feb 2008] DSA-1503-1 kernelimage-2.4.27 - several issues
	{CVE-2004-2731 CVE-2006-4814 CVE-2006-5753 CVE-2006-5823 CVE-2006-6053 CVE-2006-6054 CVE-2006-6106 CVE-2007-1353 CVE-2007-1592 CVE-2007-2172 CVE-2007-2525 CVE-2007-3848 CVE-2007-4308 CVE-2007-4311 CVE-2007-5093 CVE-2007-6063 CVE-2007-6151 CVE-2007-6206 CVE-2007-6694 CVE-2008-0007}
	[sarge] - kernel-latest-2.4-i386 101sarge2
	[sarge] - kernel-image-2.4.27-alpha 2.4.27-10sarge6
	[sarge] - kernel-image-2.4.27-m68k 2.4.27-3sarge6
	[sarge] - i2c 1:2.9.1-1sarge2
	[sarge] - systemimager 3.2.3-6sarge5
	[sarge] - kernel-latest-2.4-alpha 101sarge3
	[sarge] - kernel-patch-powerpc-2.4.27 2.4.27-10sarge6
	[sarge] - kernel-latest-2.4-sparc 42sarge3
	[sarge] - kernel-patch-2.4.27-mips 2.4.27-10.sarge4.040815-3
	[sarge] - pcmcia-modules-2.4.27-i386 3.2.5+2sarge2
	[sarge] - kernel-image-2.4.27-ia64 2.4.27-10sarge6
	[sarge] - mindi-kernel 2.4.27-2sarge5
	[sarge] - kernel-latest-2.4-s390 2.4.27-1sarge2
	[sarge] - hostap-modules-i386 1:0.3.7-1sarge3
	[sarge] - kernel-image-speakup-i386 2.4.27-1.1sarge5
	[sarge] - kernel-source-2.4.27 2.4.27-10sarge6
	[sarge] - kernel-image-2.4.27-arm 2.4.27-2sarge6
	[sarge] - kernel-image-2.4.27-i386 2.4.27-10sarge6
	[sarge] - kernel-image-2.4.27-sparc 2.4.27-9sarge6
	[sarge] - kernel-image-2.4.27-s390 2.4.27-2sarge6
[22 Feb 2008] DSA-1502-1 wordpress - multiple vulnerabilities
	{CVE-2007-2821 CVE-2007-3238 CVE-2008-0193 CVE-2008-0194}
	[etch] - wordpress 2.0.10-1etch1
[21 Feb 2008] DSA-1501-1 dspam - information disclosure
	{CVE-2007-6418}
	[etch] - dspam 3.6.8-5etch1
[21 Feb 2008] DSA-1500-1 splitvt - privilege escalation
	{CVE-2008-0162}
	[etch] - splitvt 1.6.5-9etch1
[19 Feb 2008] DSA-1499-1 pcre3 - arbitrary code execution
	{CVE-2008-0674}
	[sarge] - pcre3 4.5+7.4-2
	[etch] - pcre3 6.7+7.4-3
[19 Feb 2008] DSA-1498-1 libimager-perl - buffer overflow
	{CVE-2007-2459 CVE-2007-2413}
	[etch] - libimager-perl 0.50-1etch1
[16 Feb 2008] DSA-1497-1 clamav - several vulnerabilities
	{CVE-2007-6595 CVE-2008-0318}
	[etch] - clamav 0.90.1dfsg-3etch10
[12 Feb 2008] DSA-1496-1 mplayer - arbitrary code execution
	{CVE-2008-0485 CVE-2008-0486 CVE-2008-0629 CVE-2008-0630}
	[etch] - mplayer 1.0~rc1-12etch2
[12 Feb 2008] DSA-1495-1 nagios-plugins - several
	{CVE-2007-5198 CVE-2007-5623}
	[sarge] - nagios-plugins 1.4-6sarge1
	[etch] - nagios-plugins 1.4.5-1etch1
[11 Feb 2008] DSA-1494-1 linux-2.6 - privilege escalation
	{CVE-2008-0163 CVE-2008-0600}
	[etch] - linux-2.6 2.6.18.dfsg.1-18etch1
[10 Feb 2008] DSA-1493-1 sdl-image1.2
	{CVE-2007-6697 CVE-2008-0544}
	[sarge] - sdl-image1.2 1.2.4-1etch1
	[etch] - sdl-image1.2 1.2.5-2etch1
[10 Feb 2008] DSA-1492-1 wml
	{CVE-2008-0665 CVE-2008-0666}
	[etch] - wml 2.0.11-1etch1
[10 Feb 2008] DSA-1491-1 tk8.4 - arbitrary code execution
	{CVE-2008-0553}
	[sarge] - tk8.4 8.4.9-1sarge2
	[etch] - tk8.4 8.4.12-1etch2
[10 Feb 2008] DSA-1490-1 tk8.3 - arbitrary code execution
	{CVE-2008-0553}
	[sarge] - tk8.3 8.3.5-4sarge1
	[etch] - tk8.3 8.3.5-6etch2
[10 Feb 2008] DSA-1489-1 iceweasel - several vulnerabilities
	{CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594}
	[etch] - iceweasel 2.0.0.12-0etch1
[09 Feb 2008] DSA-1488-1 phpbb2 - several vulnerabilities
	{CVE-2006-4758 CVE-2006-6508 CVE-2006-6839 CVE-2006-6840 CVE-2006-6841 CVE-2008-0471}
	[sarge] - phpbb2 2.0.13+1-6sarge4
	[etch] - phpbb2 2.0.21-7
[08 Feb 2008] DSA-1487-1 libexif - several vulnerabilities
	{CVE-2007-2645 CVE-2007-6351 CVE-2007-6352}
	[sarge] - libexif 0.6.9-6sarge2
	[etch] - libexif 0.6.13-5etch2
[05 Feb 2008] DSA-1486-1 gnatsweb - cross-site scripting
	{CVE-2007-2808}
	[etch] - gnatsweb 4.00-1etch1
[10 Feb 2008] DSA-1485-2 icedove - several vulnerabilities
	{CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594}
	[etch] - icedove 1.5.0.13+1.5.0.15b.dfsg1-0etch2
[10 Feb 2008] DSA-1484-1 xulrunner - several vulnerabilities
	{CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594}
	[etch] - xulrunner 1.8.0.15~pre080131b-0etch1
[06 Feb 2008] DSA-1483-1 net-snmp - denial of service
	{CVE-2007-5846}
	[etch] - net-snmp 5.2.3-7etch2
[05 Feb 2008] DSA-1482-1 squid - programming error
    	{CVE-2007-6239}
	[etch] - squid 2.6.5-6etch1
	NOTE: temporary i386 update for sarge on: http://people.debian.org/~jmm/squid/
[05 Feb 2008] DSA-1481-1 python-cherrypy - missing input sanitising
    	{CVE-2008-0252}
	[etch] - python-cherrypy 2.2.1-3etch1
[05 Feb 2008] DSA-1480-1 poppler - several vulnerabilities
    	{CVE-2007-4352 CVE-2007-5392 CVE-2007-5393}
	[etch] - poppler 0.4.5-5.1etch2
[29 Jan 2008] DSA-1479-1 linux-2.6
	{CVE-2007-2878 CVE-2007-4571 CVE-2007-6151 CVE-2008-0001}
	[etch] - linux-2.6 2.6.18.dfsg.1-17etch1
[28 Jan 2008] DSA-1478-1 mysql-dfsg-5.0 - buffer overflows
        {CVE-2008-0226 CVE-2008-0227}
        [etch] - mysql-dfsg-5.0 5.0.32-7etch5
[27 Jan 2008] DSA-1477-1 yarssr - missing input sanitising
        {CVE-2007-5837}
        [etch] - yarssr 0.2.2-1etch1
[27 Jan 2008] DSA-1476-1 pulseaudio - programming error
        {CVE-2008-0008}
        [etch] - pulseaudio 0.9.5-5etch1
[26 Jan 2008] DSA-1475-1 gforge - cross site scripting
        {CVE-2007-0176}
        [etch] - gforge 4.5.14-22etch5
[21 Jan 2008] DSA-1474-1 exiv2 - arbitrary code execution
        {CVE-2007-6353}
        [etch] - exiv2 0.10-1.5
[21 Jan 2008] DSA-1473-1 scponly - arbitrary code execution
        {CVE-2007-6350 CVE-2007-6415}
        [sarge] - scponly 4.0-1sarge2
        [etch] - scponly 4.6-1etch1
[21 Jan 2008] DSA-1472-1 xine-lib - buffer overflow
	{CVE-2008-0225}
	[etch] - xine-lib 1.1.2+dfsg-5
	[sarge] - xine-lib 1.0.1-1sarge6
[21 Jan 2008] DSA-1471-1 libvorbis - several vulnerabilities
	{CVE-2007-3106 CVE-2007-4029 CVE-2007-4065 CVE-2007-4066}
	[etch] - libvorbis 1.1.2.dfsg-1.3
	[sarge] - libvorbis 1.1.0-2
[20 Jan 2008] DSA-1470-1 horde3 - missing input sanitising
	{CVE-2007-6018}
	[etch] - horde3 3.1.3-4etch2
	[sarge] - horde3 <not-affected> (Vulnerable code not present)
[20 Jan 2008] DSA-1469-1 flac
	{CVE-2007-4619 CVE-2007-6277}
	[etch] - flac 1.1.2-8
	[sarge] - flac 1.1.1-5sarge1
[20 Jan 2008] DSA-1468-1 tomcat5.5
	{CVE-2008-0128 CVE-2007-2450}
	[etch] - tomcat5.5 5.5.20-2etch2
[19 Jan 2008] DSA-1467-1 mantis - several vulnerabilities
	{CVE-2006-6574 CVE-2007-6611}
	[sarge] - mantis 0.19.2-5sarge5
[19 Jan 2008] DSA-1466-2 libxfont xfree86 xorg-server - several vulnerabilities
	{CVE-2007-5760 CVE-2007-5958 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0006}
	[sarge] - xfree86 4.3.0.dfsg.1-14sarge7
	[etch] - xorg-server 2:1.1.1-21etch3
[17 Jan 2008] DSA-1465-2 apt-listchanges - arbitrary code execution
	{CVE-2008-0302}
	[etch] - apt-listchanges 2.72.5etch2
[15 Jan 2008] DSA-1464-1 syslog-ng - denial of service
	{CVE-2007-6437}
	[etch] - syslog-ng 2.0.0-1etch1
[14 Jan 2008] DSA-1463-1 postgresql-7.4 - several
	{CVE-2007-3278 CVE-2007-4769 CVE-2007-4772 CVE-2007-6067 CVE-2007-6600 CVE-2007-6601}
	[etch] - postgresql-7.4 7.4.19-0etch1
	[sarge] - postgresql 7.4.7-6sarge6
[13 Jan 2008] DSA-1462-1 hplip - missing input sanitising
	{CVE-2007-5208}
	[etch] - hplip 1.6.10-3etch1
[13 Jan 2008] DSA-1461-1 libxml2 - denial of service
	{CVE-2007-6284}
	[etch] - libxml2 2.6.27.dfsg-2
	[sarge] - libxml2 2.6.16-7sarge1
[13 Jan 2008] DSA-1460-1 postgresql-8.1 - several
	{CVE-2007-3278 CVE-2007-4769 CVE-2007-4772 CVE-2007-6067 CVE-2007-6600 CVE-2007-6601}
	[etch] - postgresql-8.1 8.1.11-0etch1
[13 Jan 2008] DSA-1459-1 gforge - SQL injection
	{CVE-2008-0173}
	[sarge] - gforge 3.1-31sarge5
	[etch] - gforge 4.5.14-22etch4
[10 Jan 2008] DSA-1458-1 openafs
	{CVE-2007-6599}
	[etch] - openafs 1.4.2-6etch1
	[sarge] - openafs 1.3.81-3sarge3
[09 Jan 2008] DSA-1457-1 dovecot
	{CVE-2007-6598}
	[etch] - dovecot 1.0.rc15-2etch3
[09 Jan 2008] DSA-1456-1 fail2ban
	{CVE-2007-4321}
	[etch] - fail2ban 0.7.5-2etch1
[08 Jan 2008] DSA-1455-1 libarchive
	{CVE-2007-3641 CVE-2007-3644 CVE-2007-3645}
	[etch] - libarchive 1.2.53-2etch1
[07 Jan 2008] DSA-1454-1 freetype - arbitrary code execution
	{CVE-2007-1351}
	[etch] - freetype 2.2.1-5+etch2
[07 Jan 2008] DSA-1453-1 tomcat5 - several vulnerabilities
	{CVE-2007-3382 CVE-2007-3385 CVE-2007-5461}
	[etch] - tomcat5 5.0.30-12etch1
[06 Jan 2008] DSA-1452-1 wzdftpd denial of service
	{CVE-2007-5300}
	[etch] - wzdftpd 0.8.1-2etch1
	[sarge] - wzdftpd 0.5.2-1.1sarge3
[06 Jan 2008] DSA-1451-1 mysql-dfsg-5.0 several vulnerabilities
	{CVE-2007-3781 CVE-2007-5969 CVE-2007-6304}
	[etch] - mysql-dfsg-5.0 5.0.32-7etch4
[05 Jan 2008] DSA-1450-1 util-linux privilege escalation
	{CVE-2007-5191}
	[etch] - util-linux 2.12r-19etch1
	[sarge] - util-linux 2.12p-4sarge2
[05 Jan 2008] DSA-1449-1 loop-aes-utils privilege escalation
	{CVE-2007-5191}
	[etch] - loop-aes-utils 2.12r-15+etch1
	[sarge] - loop-aes-utils 2.12p-4sarge2
[05 Jan 2008] DSA-1448-1 eggdrop arbitrary code execution
	{CVE-2007-2807}
	[etch] - eggdrop 1.6.18-1etch1
	[sarge] - eggdrop 1.6.17-3sarge1
[03 Jan 2008] DSA-1447-1 tomcat5.5 several vulnerabilities
	{CVE-2007-3382 CVE-2007-3385 CVE-2007-3386 CVE-2007-5342 CVE-2007-5461}
	[etch] - tomcat5.5 5.5.20-2etch1
[03 Jan 2008] DSA-1446-1 wireshark denial of service
	{CVE-2007-6450 CVE-2007-6451}
	[etch] - wireshark 0.99.4-5.etch.2
	[sarge] - ethereal 0.10.10-2sarge11
[03 Jan 2008] DSA-1445-1 maradns denial of service
	{CVE-2008-0061}
	[etch] - maradns 1.2.12.04-1etch2
	[sarge] - maradns 1.0.27-2
[03 Jan 2008] DSA-1444-1 php5 several issues
	{CVE-2007-3799 CVE-2007-3998 CVE-2007-4657 CVE-2007-4658 CVE-2007-4660 CVE-2007-4662 CVE-2007-5898 CVE-2007-5899}
	[etch] - php5 5.2.0-8+etch9
[03 Jan 2008] DSA-1443-1 tcpreen buffer overflows
	{CVE-2007-6562}
	[etch] - tcpreen 1.4.3-0.1etch1
[29 Dec 2007] DSA-1442-1 libsndfile
	{CVE-2007-4974}
	[etch] - libsndfile 1.0.16-2
[28 Dec 2007] DSA-1441-1 peercast
	{CVE-2007-6454}
	[etch] - peercast 0.1217.toots.20060314-1etch0
[28 Dec 2007] DSA-1440-1 inotify-tools
	{CVE-2007-5037}
	[etch] - inotify-tools 3.3-2
[28 Dec 2007] DSA-1439-1 typo3-src
	{CVE-2007-6381}
	[etch] - typo3-src 4.0.2+debian-4
[28 Dec 2007] DSA-1438-1 tar
	{CVE-2007-4131 CVE-2007-4476}
	[etch] - tar 1.16-2etch1
	[sarge] - tar 1.14-2.4
[26 Dec 2007] DSA-1437-1 cupsys
	{CVE-2007-5849 CVE-2007-6358}
	[etch] - cupsys 1.2.7-4etch2
[20 Dec 2007] DSA-1436-1 linux-2.6 fai-kernels user-mode-linux - several vulnerabilities
	{CVE-2006-6058 CVE-2007-5966 CVE-2007-6063 CVE-2007-6206 CVE-2007-6417}
	[etch] - linux-2.6 2.6.18.dfsg.1-13etch6
	[etch] - fai-kernels 1.17+etch.13etch6
	[etch] - user-mode-linux 2.6.18-1um-2etch.13etch6
[19 Dec 2007] DSA-1435-1 clamav
        {CVE-2007-6335 CVE-2007-6336}
        [etch] - clamav 0.90.1-3etch8
[16 Dec 2007] DSA-1434-1 mydns - denial of service
	{CVE-2007-2362}
	[etch] - mydns 1:1.1.0-7etch1
[16 Dec 2007] DSA-1433-1 centericq - buffer overflow
	{CVE-2007-3713}
	[etch] - centericq 4.21.0-18etch1
	[sarge] - centericq 4.20.0-1sarge5
[16 Dec 2007] DSA-1432-1 link-grammar - buffer overflow
	{CVE-2007-5395}
	[etch] - link-grammar 4.2.2-4etch1
[11 Dec 2007] DSA-1431-1 ruby-gnome2 - format string
	{CVE-2007-6183}
	[etch] - ruby-gnome2 0.15.0-1.1etch1
	[sarge] - ruby-gnome2 0.12.0-2sarge1
[11 Dec 2007] DSA-1430-1 libnss-ldap - information disclosure
	{CVE-2007-5794}
	[etch] - libnss-ldap 251-7.5etch1
	[sarge] - libnss-ldap 238-1sarge1
[11 Dec 2007] DSA-1429-1 htdig - cross site scripting
	{CVE-2007-6110}
	[etch] - htdig 1:3.2.0b6-3.1etch1
[10 Dec 2007] DSA-1428-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2007-3104 CVE-2007-4997 CVE-2007-5500 CVE-2007-5904}
	[etch] - linux-2.6 2.6.18.dfsg.1-13etch5
	[etch] - fai-kernels 1.17+etch.13etch5
	[etch] - user-mode-linux 2.6.18-1um-2etch.13etch5
[10 Dec 2007] DSA-1427-1 samba - buffer overflow
	{CVE-2007-6015}
	[etch] - samba 3.0.24-6etch9
	[sarge] - samba 3.0.14a-3sarge11
[08 Dec 2007] DSA-1426-1 qt-x11-free - several vulnerabilities
	{CVE-2007-3388 CVE-2007-4137}
	[sarge] - qt-x11-free 3:3.3.4-3sarge3
	[etch] - qt-x11-free 3:3.3.7-4etch1
[08 Dec 2007] DSA-1425-1 xulrunner - several vulnerabilities
	{CVE-2007-5947 CVE-2007-5959 CVE-2007-5960}
	[etch] - xulrunner 1.8.0.14~pre071019c-0etch1
[08 Dec 2007] DSA-1424-1 iceweasel - several vulnerabilities
	{CVE-2007-5947 CVE-2007-5959 CVE-2007-5960}
	[etch] - iceweasel 2.0.0.10-0etch1
[07 Dec 2007] DSA-1423-1 sitebar - several vulnerabilities
	{CVE-2007-5491 CVE-2007-5492 CVE-2007-5693 CVE-2007-5694 CVE-2007-5695 CVE-2007-5692}
	[etch] - sitebar 3.3.8-7etch1
	[sarge] - sitebar 3.2.6-7.1sarge1
[07 Dec 2007] DSA-1422-1 e2fsprogs - arbitrary code execution
	{CVE-2007-5497}
	[etch] - e2fsprogs 1.39+1.40-WIP-2006.11.14+dfsg-2etch1
[06 Dec 2007] DSA-1421-1 wesnoth - directory traversal
	{CVE-2007-5742}
	[sarge] - wesnoth 0.9.0-7
	[etch] - wesnoth 1.2-3
[05 Dec 2007] DSA-1420-1 zabbix - programming error
	{CVE-2007-6210}
	[etch] - zabbix 1:1.1.4-10etch1
[05 Dec 2007] DSA-1419-1 openoffice.org
	{CVE-2007-4575}
	[etch] - openoffice.org 2.0.4.dfsg.2-7etch4
	[etch] - hsqldb 1.8.0.7-1etch1
	[sarge] - openoffice.org <not-affected> (Vulnerable code not present)
	[sarge] - hsqldb <not-affected> (Vulnerable code not present)
[02 Dec 2007] DSA-1418-1 cacti - SQL injection
	{CVE-2007-6035}
	[sarge] - cacti 0.8.6c-7sarge5
	[etch] - cacti 0.8.6i-3.2
[02 Dec 2007] DSA-1417-1 asterisk - SQL injection
	{CVE-2007-6170}
	[sarge] - asterisk 1:1.0.7.dfsg.1-2sarge6
	[etch] - asterisk 1:1.2.13~dfsg-2etch2
[22 Nov 2007] DSA-1409-3 samba - several vulnerabilities (update)
	{CVE-2007-4572 CVE-2007-5398}
	[etch] - samba 3.0.24-6etch8
	[sarge] - samba 3.0.14a-3sarge10
	NOTE: this fixes all regressions introduced by the previous DSAs
[27 Nov 2007] DSA-1416-1 tk8.3 - buffer overflow
	{CVE-2007-5378}
	[etch] - tk8.3 8.3.5-6etch1
[27 Nov 2007] DSA-1415-1 tk8.4 - buffer overflow
	{CVE-2007-5378}
	[etch] - tk8.4 8.4.12-1etch1
	[sarge] - tk8.4 8.4.9-1sarge1
[27 Nov 2007] DSA-1414-1 wireshark - several vulnerabilities
	{CVE-2007-6114 CVE-2007-6117 CVE-2007-6118 CVE-2007-6120 CVE-2007-6121}
	[etch] - wireshark 0.99.4-5.etch.1
	[sarge] - ethereal 0.10.10-2sarge10
[26 Nov 2007] DSA-1413-1 mysql - multiple
	{CVE-2007-2583 CVE-2007-2691 CVE-2007-2692 CVE-2007-3780 CVE-2007-3782 CVE-2007-5925}
	[etch] - mysql-dfsg-5.0 5.0.32-7etch3
	[sarge] - mysql-dfsg 4.0.24-10sarge3
	[sarge] - mysql-dfsg-4.1 4.1.11a-4sarge8
[24 Nov 2007] DSA-1412-1 ruby1.9 - possible man-in-the-middle attacks
	{CVE-2007-5162 CVE-2007-5770}
	[etch] - ruby1.9 1.9.0+20060609-1etch1
[24 Nov 2007] DSA-1411-1 libopenssl-ruby - possible man-in-the-middle attacks
	{CVE-2007-5162 CVE-2007-5770}
	[sarge] - libopenssl-ruby 0.1.4a-1sarge1
	NOTE: libopenssl-ruby is not in etch
[24 Nov 2007] DSA-1410-1 ruby1.8 - possible man-in-the-middle attacks
	{CVE-2007-5162 CVE-2007-5770}
	[etch] - ruby1.8 1.8.5-4etch1
	[sarge] - ruby1.8 1.8.2-7sarge6
[22 Nov 2007] DSA-1409-2 samba - several vulnerabilities
	{CVE-2007-4572 CVE-2007-5398}
	[etch] - samba 3.0.24-6etch7
	[sarge] - samba 3.0.14a-3sarge9
	NOTE: the previous DSA introduced regressions
[22 Nov 2007] DSA-1409-1 samba - several vulnerabilities
	{CVE-2007-4572 CVE-2007-5398}
	[etch] - samba 3.0.24-6etch5
	[sarge] - samba 3.0.14a-3sarge7
[21 Nov 2007] DSA-1408-1 kdegraphics - buffer overflow with arbitrary code execution
	{CVE-2007-5393}
	[etch] - kdegraphics 4:3.5.5-3etch2
[18 Nov 2007] DSA-1407-1 cupsys - buffer overflow with arbitrary code execution
	{CVE-2007-4351}
	[etch] - cupsys 1.2.7-4etch1
[11 Nov 2007] DSA-1405-2 zope-cmfplone - arbitrary code
	{CVE-2007-5741}
	[etch] - zope-cmfplone 2.5.1-4etch2
	NOTE: the previous DSA introduced a regression
[09 Nov 2007] DSA-1406-1 horde3 - several vulnerabilities
	{CVE-2006-3548 CVE-2006-3549 CVE-2006-4256 CVE-2007-1473 CVE-2007-1474}
	[sarge] - horde3 3.0.4-4sarge6
	[etch] - horde3 3.1.3-4etch1
[09 Nov 2007] DSA-1405-1 zope-cmfplone - arbitrary code
	{CVE-2007-5741}
	[etch] - zope-cmfplone 2.5.1-4etch1
[08 Nov 2007] DSA-1404-1 gallery2 - privilege escalation
	{CVE-2007-4650}
	[etch] - gallery2 2.1.2-2.0.etch.1
[08 Nov 2007] DSA-1403-1 phpmyadmin - cross-site scripting
	{CVE-2007-5386 CVE-2007-5589}
	[sarge] - phpmyadmin 4:2.6.2-3sarge6
	[etch] - phpmyadmin 4:2.9.1.1-6
[08 Nov 2007] DSA-1402-1 gforge - insecure temporary files
	{CVE-2007-3921}
	[sarge] - gforge 3.1-31sarge4
	[etch] - gforge 4.5.14-22etch3
[06 Nov 2007] DSA-1400-1 perl - arbitrary code execution
	{CVE-2007-5116}
	[sarge] - perl 5.8.4-8sarge6
	[etch] - perl 5.8.8-7etch1
[05 Nov 2007] DSA-1401-1 iceape - several vulnerabilities
	{CVE-2006-2894 CVE-2007-1095 CVE-2007-2292 CVE-2007-3511 CVE-2007-5334 CVE-2007-5337 CVE-2007-5338 CVE-2007-5339 CVE-2007-5340}
	[etch] - iceape 1.0.11~pre071022-0etch1
[05 Nov 2007] DSA-1399-1 pcre3 - arbitrary code execution
	{CVE-2007-1659 CVE-2007-1660 CVE-2007-1661 CVE-2007-1662 CVE-2007-4766 CVE-2007-4767 CVE-2007-4768}
	[sarge] - pcre3 4.5+7.4-1
	[etch] - pcre3 6.7+7.4-2
[05 Nov 2007] DSA-1398-1 perdition - format string vulnerability
	{CVE-2007-5740}
	[etch] - perdition 1.17-7etch1
	[sarge] - perdition 1.15-5sarge1
[03 Nov 2007] DSA-1397-1 mono - buffer overflow
	{CVE-2007-5197}
	[etch] - mono 1.2.2.1-1etch1
[29 Oct 2007] DSA-1388-3 dhcp - buffer overflow
	{CVE-2007-5365}
	[etch] - dhcp 2.0pl5-19.5etch2
	NOTE: DSA-1388-1 was incomplete
[27 Oct 2007] DSA-1396-1 iceweasel
        {CVE-2007-1095 CVE-2007-2292 CVE-2007-3511 CVE-2007-5334 CVE-2007-5335  CVE-2007-5337 CVE-2007-5338 CVE-2007-5339 CVE-2007-5340}
        [etch] - iceweasel 2.0.0.6+2.0.0.8-0etch1
[25 Oct 2007] DSA-1395-1 xen-3.0 - insecure temporary files
	{CVE-2007-3919}
	[etch] - xen-3.0 3.0.3-0-4
[24 Oct 2007] DSA-1389-2 zoph - SQL injection
	{CVE-2007-3905}
	[sarge] - zoph 0.3.3-12sarge3
[23 Oct 2007] DSA-1394-1 reprepro - authentication bypass
	{CVE-2007-4739}
	[etch] - reprepro 1.3.1+1-1
[23 Oct 2007] DSA-1393-1 xfce4-terminal - insecure execution
	{CVE-2007-3770}
	[etch] - xfce4-terminal 0.2.5.6rc1-2etch1
[23 Oct 2007] DSA-1373-2 ktorrent - directory traversal
	{CVE-2007-1799} 
	[etch] - ktorrent 2.0.3+dfsg1-2.2etch1
[20 Oct 2007] DSA-1392-1 xulrunner - several vulnerabilities
        {CVE-2006-2894 CVE-2007-1095 CVE-2007-2292 CVE-2007-3511 CVE-2007-5334 CVE-2007-5337 CVE-2007-5338 CVE-2007-5339 CVE-2007-5340}
        [etch] - xulrunner 1.8.0.14~pre071019b-0etch1
[19 Oct 2007] DSA-1391-1 icedove - several vulnerabilities
        {CVE-2007-3734 CVE-2007-3735 CVE-2007-3844 CVE-2007-3845 CVE-2007-5339 CVE-2007-5340}
        [etch] - icedove 1.5.0.13+1.5.0.14b.dfsg1-0etch1
[18 Oct 2007] DSA-1390-1 t1lib - arbitrary code execution
        {CVE-2007-4033}
        [sarge] - t1lib 5.0.2-3sarge1
        [etch] - t1lib 5.1.0-2etch1
[18 Oct 2007] DSA-1389-1 zoph - SQL injection
	{CVE-2007-3905}
	[etch] - zoph 0.6-2.1etch1
[18 Oct 2007] DSA-1388-1 dhcp
	{CVE-2007-5365}
	[etch] - dhcp 2.0pl5-19.5etch1
	[sarge] - dhcp 2.0pl5-19.1sarge3
[15 Oct 2007] DSA-1387-1 librpcsecgss
	{CVE-2007-4743}
	[etch] - librpcsecgss 0.14-2etch3
[15 Oct 2007] DSA-1386-1 wesnoth
	{CVE-2007-3917}
	[etch] - wesnoth 1.2-2
	[sarge] - wesnoth 0.9.0-6
[08 Oct 2007] DSA-1385-1 xfs
	{CVE-2007-4568 CVE-2007-4990}
	[etch] - xfs 1.0.1-7
	[sarge] - xfree86 4.3.0.dfsg.1-14sarge5
[05 Oct 2007] DSA-1384-1 xen-3.0
	{CVE-2007-4993 CVE-2007-1320}
	[etch] - xen-3.0 3.0.3-0-3
[04 Oct 2007] DSA-1383-1 gforge - cross-site scripting
	{CVE-2007-3918}
	[sarge] - gforge 3.1-31sarge3
	[etch] - gforge 4.5.14-22etch2
[03 Oct 2007] DSA-1382-1 quagga
	{CVE-2007-4826}
	[etch] - quagga 0.99.5-5etch3
	[sarge] - quagga 0.98.3-7.5
[02 Oct 2007] DSA-1381-2 linux-2.6
	{CVE-2006-5755 CVE-2007-4133 CVE-2007-4573 CVE-2007-5093}
	[etch] - linux-2.6 2.6.18.dfsg.1-13etch4
[02 Oct 2007] DSA-1380-1 elinks - information disclosure
	{CVE-2007-5034}
	[etch] - elinks 0.11.1-1.2etch1
[02 Oct 2007] DSA-1379-1 openssl - arbitrary code execution
	{CVE-2007-5135}
	[sarge] - openssl 0.9.7e-3sarge5
	[sarge] - openssl096 0.9.6m-1sarge5
	[etch] - openssl 0.9.8c-4etch1
	[etch] - openssl097 0.9.7k-3.1etch1
[02 Oct 2007] DSA-1365-3 id3lib3.8.3 - denial of service
	{CVE-2007-4460}
	[sarge] - id3lib3.8.3 3.8.3-4.1sarge1
	[etch] - id3lib3.8.3 3.8.3-6etch1
[28 Sep 2007] DSA-1378-2 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2007-3731 CVE-2007-3739 CVE-2007-3740 CVE-2007-4573 CVE-2007-4849}
	[etch] - linux-2.6 2.6.18.dfsg.1-13etch3
	[etch] - fai-kernels 1.17+etch.13etch3
	[etch] - user-mode-linux 2.6.18-1um-2etch.13etch3
[27 Sep 2007] DSA-1378-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
	{CVE-2007-3731 CVE-2007-3739 CVE-2007-3740 CVE-2007-4573 CVE-2007-4849}
	[etch] - linux-2.6 2.6.18.dfsg.1-13etch3
	[etch] - fai-kernels 1.17+etch.13etch3
	[etch] - user-mode-linux 2.6.18-1um-2etch.13etch3
[02 Aug 2007] DSA-1343-2 file
	{CVE-2007-2799}
	[etch] - file 4.17-5etch3
[21 Sep 2007] DSA-1377-2 fetchmail - null pointer dereference
	{CVE-2007-4565}
	[etch] - fetchmail 6.3.6-1etch1
[21 Sep 2007] DSA-1376-1 kdebase - programming error
	{CVE-2007-4569}
	[etch] - kdebase 4:3.5.5a.dfsg.1-6etch1
[19 Sep 2007] DSA-1364-2 vim - several vulnerabilities
	{CVE-2007-2438 CVE-2007-2953}
	[etch] - vim 1:7.0-122+1etch3
[17 Sep 2007] DSA-1375-1 openoffice.org - buffer overflow
	{CVE-2007-2834}
	[etch] - openoffice.org 2.0.4.dfsg.2-7etch2
	[sarge] - openoffice.org 1.1.3-9sarge8
[11 Sep 2007] DSA-1373-1 ktorrent - directory traversal vulnerabilities
	{CVE-2007-1799}
	[etch] - ktorrent 2.0.3+dfsg1-2etch1
[11 Sep 2007] DSA-1374-1 jffnms - several vulnerabilities
	{CVE-2007-3189 CVE-2007-3190 CVE-2007-3191 CVE-2007-3192}
	[etch] - jffnms 0.8.3dfsg.1-2.1etch1
[11 Sep 2007] DSA-1371-1 phpwiki - several vulnerabilities
	{CVE-2007-2024 CVE-2007-2025 CVE-2007-3193}
	[etch] - phpwiki 1.3.12p3-5etch1
[10 Sep 2007] DSA-1370-2 phpmyadmin - several vulnerabilities
	{CVE-2006-6942 CVE-2006-6944 CVE-2007-1325 CVE-2007-1395 CVE-2007-2245}
	[sarge] - phpmyadmin 4:2.6.2-3sarge5
	[etch] - phpmyadmin 4:2.9.1.1-4
[09 Sep 2007] DSA-1365-2 id3lib3.8.3 - denial of service
	{CVE-2007-4460}
	[etch] - id3lib3.8.3 3.8.3-6etch1
[09 Sep 2007] DSA-1372-1 xorg-server - privilege escalation
        {CVE-2007-4730}
        [etch] - xorg-server 2:1.1.1-21etch1
[10 Sep 2007] DSA-1370-1 phpmyadmin - several vulnerabilities
	{CVE-2006-6942 CVE-2006-6944 CVE-2007-1325 CVE-2007-1395 CVE-2007-2245}
	[sarge] - phpmyadmin 4:2.6.2-3sarge5
	[etch] - phpmyadmin 4:2.9.1.1-4
[06 Sep 2007] DSA-1369-1 gforge - SQL injection
        {CVE-2007-3913}
        [sarge] - gforge 3.1-31sarge2
        [etch] - gforge 4.5.14-22etch1
[04 Sep 2007] DSA-1368-1 librpcsecgss - arbitrary code execution
        {CVE-2007-3999}
        [etch] - librpcsecgss 0.14-2etch1
[06 Sep 2007] DSA-1367-1 krb5 - arbitrary code execution
        {CVE-2007-3999 CVE-2007-4743}
        [etch] - krb5 1.4.4-7etch4
[02 Sep 2007] DSA-1288-2 pptpd - regression
	{CVE-2007-0244}
	[etch] - pptpd 1.3.0-2etch2
[01 Sep 2007] DSA-1366-1 clamav
        {CVE-2007-4510 CVE-2007-4560}
        [etch] - clamav 0.90.1-3etch7
[01 Sep 2007] DSA-1365-1 id3lib3.8.3
        {CVE-2007-4460}
        [sarge] - id3lib3.8.3 3.8.3-4.1sarge1
        [etch] - id3lib3.8.3 3.8.3-6etch1
[01 Sep 2007] DSA-1364-1 vim
        {CVE-2007-2438 CVE-2007-2953}
        [sarge] - vim 1:6.3-071+1sarge2
        [etch] - vim 1:7.0-122+1etch3
[31 Aug 2007] DSA-1363-1 linux-2.6
        {CVE-2007-2172 CVE-2007-2875 CVE-2007-3105 CVE-2007-3843 CVE-2007-4308}
        [etch] - linux-2.6 2.6.18.dfsg.1-13etch2
[29 Aug 2007] DSA-1362-1 lighttpd - several vulnerabilities
	{CVE-2007-3946 CVE-2007-3947 CVE-2007-3949 CVE-2007-3950 CVE-2007-4727}
	[etch] - lighttpd 1.4.13-4etch4
[29 Aug 2007] DSA-1361-1 postfix-policyd - arbitrary code execution
	{CVE-2007-3791}
	[etch] - postfix-policyd 1.80-2.1etch1
[28 Aug 2007] DSA-1360-1 rsync - arbitrary code execution
	{CVE-2007-4091}
	[etch] - rsync 2.6.9-2etch1
[28 Aug 2007] DSA-1359-1 dovecot - directory traversal
	{CVE-2007-2231}
	[etch] - dovecot 1.0.rc15-2etch1
[26 Aug 2007] DSA-1358-1 asterisk
	{CVE-2007-1306 CVE-2007-1561 CVE-2007-2294 CVE-2007-2297 CVE-2007-2488 CVE-2007-3762 CVE-2007-3763 CVE-2007-3764}
	[etch] - asterisk 1:1.2.13~dfsg-2etch1
	[sarge] - asterisk 1:1.0.7.dfsg.1-2sarge5
[19 Aug 2007] DSA-1357-1 koffice - integer overflow
        {CVE-2007-3387}
        [etch] - koffice 1:1.6.1-2etch1
[15 Aug 2007] DSA-1356-1 linux-2.6 - several vulnerabilities
	{CVE-2007-1353 CVE-2007-2172 CVE-2007-2453 CVE-2007-2525 CVE-2007-2876 CVE-2007-3513 CVE-2007-3642 CVE-2007-3848 CVE-2007-3851 CVE-2007-2242 CVE-2006-5753}
	[etch] - linux-2.6 2.6.18.dfsg.1-13etch1
	NOTE: The above entry includes fixes pulled in through -13 in 4.0r1
[13 Aug 2007] DSA-1355-1 kdegraphics - integer overflow
	{CVE-2007-3387}
	[sarge] - kdegraphics 4:3.3.2-2sarge5
	[etch] - kdegraphics 4:3.5.5-3etch1
[13 Aug 2007] DSA-1354-1 gpdf - integer overflow
        {CVE-2007-3387}
        [sarge] - gpdf 2.8.2-1.2sarge6
[08 Aug 2007] DSA-1353-1 tcpdump - integer overflow
	{CVE-2007-3798}
	[sarge] - tcpdump 3.8.3-5sarge3
	[etch] - tcpdump 3.9.5-2etch1
[07 Aug 2007] DSA-1352-1 pdfkit.framework - integer overflow
	{CVE-2007-3387}
	[sarge] - pdfkit.framework 0.8-2sarge4
[07 Aug 2007] DSA-1351-1 bochs - buffer overflow
	{CVE-2007-2893}
	[sarge] - bochs 2.1.1+20041109-3sarge1
	[etch] - bochs 2.3-2etch1
[06 Aug 2007] DSA-1350-1 tetex-bin
	{CVE-2007-3387}
	[sarge] - tetex-bin 2.0.2-30sarge5
[05 Aug 2007] DSA-1349-1 libextractor - integer overflow
	{CVE-2007-3387}
	[sarge] - libextractor 0.4.2-2sarge6
[04 Aug 2007] DSA-1348-1 poppler
	{CVE-2007-3387}
	[etch] - poppler 0.4.5-5.1etch1
[04 Aug 2007] DSA-1347-1 xpdf
	{CVE-2007-3387}
	[etch] - xpdf 3.01-9etch1
	[sarge] - xpdf 3.00-13.7
[04 Aug 2007] DSA-1346-1 iceape
	{CVE-2007-3844 CVE-2007-3845 CVE-2007-4041}
	[etch] - iceape 1.0.10~pre070720-0etch3
[04 Aug 2007] DSA-1345-1 xulrunner
	{CVE-2007-3844 CVE-2007-3845 CVE-2007-4041}
	[etch] - xulrunner 1.8.0.13~pre070720-0etch3
[03 Aug 2007] DSA-1344-1 iceweasel
	{CVE-2007-3844 CVE-2007-3845 CVE-2007-4041}
	[etch] - iceweasel 2.0.0.6-0etch1
[02 Aug 2007] DSA-1343-1 file
	{CVE-2007-2799}
	[sarge] - file 4.12-1sarge2
	[etch] - file 4.17-5etch2
[30 Jul 2007] DSA-1342-1 xfs
	{CVE-2007-3103}
	[etch] - xfs 1:1.0.1-6
[25 Jul 2007] DSA-1341-2 bind9 - DNS cache poisoning vulnerability
	{CVE-2007-2926}
	[etch] - bind9 1:9.3.4-2etch1
	[sarge] - bind9 1:9.2.4-1sarge3
[24 Jul 2007] DSA-1340-1 clamav - null pointer dereference
	{CVE-2007-3725}
	[etch] - clamav 0.90.1-3etch4
[24 Jul 2007] DSA-1339-1 iceape - several
	{CVE-2007-3089 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738}
	[etch] - iceape 1.0.10~pre070720-0etch1
[23 Jul 2007] DSA-1338-1 iceweasel
	{CVE-2007-3089 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738 CVE-2007-4038}
	[etch] - iceweasel 2.0.0.5-0etch1
[22 Jul 2007] DSA-1337-1 xulrunner
	{CVE-2007-3089 CVE-2007-3656 CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3738}
	[etch] - xulrunner 1.8.0.13~pre070720-0etch1
[22 Jul 2007] DSA-1336-1 mozilla-firefox
	{CVE-2007-1282 CVE-2007-0994 CVE-2007-0995 CVE-2007-0996 CVE-2007-0981 CVE-2007-0008 CVE-2007-0009 CVE-2007-0775 CVE-2007-0778 CVE-2007-0045 CVE-2006-6077}
	[sarge] - mozilla-firefox 1.0.4-2sarge17
[18 Jul 2007] DSA-1335-1 gimp
	{CVE-2006-4519 CVE-2007-2949}
	[sarge] - gimp 2.2.6-1sarge4
	[etch] - gimp 2.2.13-1etch4
[18 Jul 2007] DSA-1334-1 freetype
	{CVE-2007-2754}
	[sarge] - freetype 2.1.7-8
[18 Jul 2007] DSA-1333-1 curl
	{CVE-2007-3564}
	[etch] - curl 7.15.5-1etch1
[09 Jul 2007] DSA-1332-1 vlc
	{CVE-2007-3316 CVE-2007-3467 CVE-2007-3468}
	[sarge] - vlc 0.8.1.svn20050314-1sarge3
	[etch] - vlc 0.8.6-svn20061012.debian-5etch1
[07 Jul 2007] DSA-1331-1 php4 - several vulnerabilities
	{CVE-2006-0207 CVE-2006-4486 CVE-2007-1864}
	[sarge] - php4 4:4.3.10-22
	[etch] - php4 6:4.4.4-8+etch4
[07 Jul 2007] DSA-1330-1 php5 - several vulnerabilities
	{CVE-2007-1399 CVE-2007-1864}
	[etch] - php5 5.2.0-8+etch7
[05 Jul 2007] DSA-1329-1 gfax - insecure temporary files
	{CVE-2007-2839}
	[sarge] - gfax 0.4.2-11sarge1
[01 Jul 2007] DSA-1328-1 unicon - buffer overflow
        {CVE-2007-2835}
	[etch] - unicon 3.0.4-11etch1
[01 Jul 2007] DSA-1327-1 gsambad - insecure temporary files
        {CVE-2007-2838}
	[etch] - gsambad 0.1.4-2etch1
[01 Jul 2007] DSA-1326-1 fireflier
	{CVE-2007-2837}
	[sarge] - fireflier 1.1.5-1sarge1 
	[etch] - fireflier 1.1.6-3etch1
[29 Jun 2007] DSA-1325-1 evolution
	{CVE-2007-1002 CVE-2007-3257}
	[sarge] - evolution 2.0.4-2sarge2
	[etch] - evolution 2.6.3-6etch1
[28 Jun 2007] DSA-1324-1 hiki
	{CVE-2007-2836}
	[etch] - hiki 0.8.6-1etch1
[28 Jun 2007] DSA-1323-1 krb5
	{CVE-2007-2442 CVE-2007-2443 CVE-2007-2798}
	[sarge] - krb5 1.3.6-2sarge5
	[etch] - krb5 1.4.4-7etch2
[27 Jun 2007] DSA-1322-1 wireshark
	{CVE-2007-3390 CVE-2007-3392 CVE-2007-3393}
	[etch] - wireshark 0.99.4-5.etch.0
[23 Jun 2007] DSA-1321-1 evolution-data-server
	{CVE-2007-3257}
	[etch] - evolution-data-server 1.6.3-5etch1
[23 Jun 2007] DSA-1320-1 clamav
	{CVE-2007-2650 CVE-2007-3023 CVE-2007-3024 CVE-2007-3122 CVE-2007-3123}
	[sarge] - clamav 0.84-2.sarge.17
	[etch] - clamav 0.90.1-3etch3
[23 Jun 2007] DSA-1319-1 maradns
        {CVE-2007-3114 CVE-2007-3115 CVE-2007-3116}
        [etch] - maradns 1.2.12.04-1etch1
[23 Jun 2007] DSA-1318-1 ekg
	{CVE-2005-2370 CVE-2005-2448 CVE-2007-1663 CVE-2007-1664 CVE-2007-1665}
	[sarge] - ekg 1:1.5+20050411-7
	[etch] - ekg 1:1.7~rc2-1etch1
[23 Jun 2007] DSA-1317-1 tinymux
        {CVE-2007-1655}
        [etch] - tinymux 2.4.3.31-1etch1
[21 Jun 2007] DSA-1316-1 emacs21
        {CVE-2007-2833}
        [etch] - emacs21 21.4a+1-3etch1
[19 Jun 2007] DSA-1315-1 libphp-phpmailer
        {CVE-2007-3215}
        [etch] - libphp-phpmailer 1.73-2etch1
[19 Jun 2007] DSA-1314-1 open-iscsi
        {CVE-2007-3099 CVE-2007-3100}
        [etch] - open-iscsi 2.0.730-1etch1
[19 Jun 2007] DSA-1313-1 mplayer
        {CVE-2007-2948}
        [etch] - mplayer 1.0~rc1-12etch1
[18 Jun 2007] DSA-1312-1 libapache-mod-jk
        {CVE-2007-1860}
        [etch] - libapache-mod-jk 1:1.2.18-3etch1
        [sarge] - libapache-mod-jk 1:1.2.5-2sarge1
[17 Jun 2007] DSA-1311-1 postgresql-7.4
        {CVE-2007-2138}
        [etch] - postgresql-7.4 1:7.4.17-0etch1
        [sarge] - postgresql 7.4.7-6sarge5
[16 Jun 2007] DSA-1310-1 libexif
        {CVE-2006-4168}
        [etch] - libexif 0.6.13-5etch1
	[sarge] - libexif 0.6.9-6sarge1
[16 Jun 2007] DSA-1309-1 postgresql-8.1
        {CVE-2007-2138}
        [etch] - postgresql-8.1 8.1.9-0etch1
[14 Jun 2007] DSA-1308-1 iceweasel - several vulnerabilities
	{CVE-2007-1116 CVE-2007-1362 CVE-2007-2867 CVE-2007-2868 CVE-2007-2869 CVE-2007-2870 CVE-2007-2871}
	[etch] - iceweasel 2.0.0.4-0etch1
[12 Jun 2007] DSA-1307-1 openoffice.org - heap overflow
        {CVE-2007-0245}
        [sarge] - openoffice.org 1.1.3-9sarge7
        [etch] - openoffice.org 2.0.4.dfsg.2-7etch1
[12 Jun 2007] DSA-1306-1 xulrunner
	{CVE-2007-1116 CVE-2007-1362 CVE-2007-2867 CVE-2007-2868 CVE-2007-2869 CVE-2007-2870 CVE-2007-2871}
	[etch] - xulrunner 1.8.0.12-0etch1
[13 Jun 2007] DSA-1305-1 icedove - several vulnerabilities
	{CVE-2007-1558 CVE-2007-2867 CVE-2007-2868}
	[etch] - icedove 1.5.0.12.dfsg1-0etch1
[16 Jun 2007] DSA-1304 kernel-source-2.6.8 - several
        {CVE-2005-4811 CVE-2006-4814 CVE-2006-4623 CVE-2006-5753 CVE-2006-5754 CVE-2006-5757 CVE-2006-6053 CVE-2006-6056 CVE-2006-6060 CVE-2006-6106 CVE-2006-6535 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592}
        [sarge] - kernel-source-2.6.8 2.6.8-16sarge7
[10 Jun 2007] DSA-1303-1 lighttpd - denial of service
	{CVE-2007-1869 CVE-2007-1870}
	[etch] - lighttpd 1.4.13-4etch1
[10 Jun 2007] DSA-1302-1 freetype - integer overflow
	{CVE-2007-2754}
	[etch] - freetype 2.2.1-5+etch1
[09 Jun 2007] DSA-1301-1 gimp
	{CVE-2007-2356}
	[sarge] - gimp 2.2.6-1sarge2
	[etch] - gimp 2.2.13-1etch1
[07 Jun 2007] DSA-1300-1 iceape
	{CVE-2007-1116 CVE-2007-1362 CVE-2007-1558 CVE-2007-2867 CVE-2007-2868 CVE-2007-2870 CVE-2007-2871}
	[etch] - iceape 1.0.9-0etch1
[07 Jun 2007] DSA-1299-1 ipsec-tools
	{CVE-2007-1841}
	[etch] - ipsec-tools 1:0.6.6-3.1etch1
[28 May 2007] DSA-1298-1 otrs2
	{CVE-2007-2524}
	[etch] - otrs2 2.0.4p01-17
[24 May 2007] DSA-1297-1 gforge-plugin-scmcvs
	{CVE-2007-0246}
	[etch] - gforge-plugin-scmcvs 4.5.14-5etch1
[21 May 2007] DSA-1296-1 php4
	{CVE-2007-2509}
	[etch] - php4 6:4.4.4-8+etch3
	[sarge] - php4 4:4.3.10-21
[19 May 2007] DSA-1295-1 php5
	{CVE-2007-2509 CVE-2007-2510}
	[etch] - php5 5.2.0-8+etch4
[17 May 2007] DSA-1294-1 xfree86
	{CVE-2007-1003 CVE-2007-1351 CVE-2007-1352 CVE-2007-1667}
	[sarge] - xfree86 4.3.0.dfsg.1-14sarge4
[17 May 2007] DSA-1293-1 quagga
	{CVE-2007-1995}
	[sarge] - quagga 0.98.3-7.4
	[etch] - quagga 0.99.5-5etch2
[15 May 2007] DSA-1292-1 qt4-x11
	{CVE-2007-0242}
	[etch] - qt4-x11 4.2.1-2etch1
[17 May 2007] DSA-1291-2 samba
	{CVE-2007-2444 CVE-2007-2446 CVE-2007-2447}
	[etch] - samba 3.0.24-6etch2
	[sarge] - samba 3.0.14a-3sarge6
[13 May 2007] DSA-1290-1 squirrelmail
	{CVE-2007-1262 CVE-2007-2589}
        [sarge] - squirrelmail 2:1.4.4-11
        [etch] - squirrelmail 2:1.4.9a-2
[13 May 2007] DSA-1289-1 linux-2.6
	{CVE-2007-1496 CVE-2007-1497 CVE-2007-1861}
	[etch] - linux-2.6 2.6.18.dfsg.1-12etch2
[08 May 2007] DSA-1288-1 pptpd
	{CVE-2007-0244}
	[etch] - pptpd 1.3.0-2etch1
[07 May 2007] DSA-1287-1 ldap-account-manager
	{CVE-2006-7191 CVE-2007-1840}
	[sarge] - ldap-account-manager 0.4.9-2sarge1
[02 May 2007] DSA-1286-1 linux-2.6
	{CVE-2007-0005 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592}
	[etch] - linux-2.6 2.6.18.dfsg.1-12etch1
[01 May 2007] DSA-1285-1 wordpress
	{CVE-2007-1622 CVE-2007-1893 CVE-2007-1894 CVE-2007-1897}
	[etch] - wordpress 2.0.10-1
[01 May 2007] DSA-1284-1 qemu
	{CVE-2007-1320 CVE-2007-1321 CVE-2007-1322 CVE-2007-1366 CVE-2007-5729 CVE-2007-5730}
	[sarge] - qemu 0.6.1+20050407-1sarge1
	[etch] - qemu 0.8.2-4etch1
[29 Apr 2007] DSA-1283-1 php5
	{CVE-2007-1286 CVE-2007-1375 CVE-2007-1376 CVE-2007-1380 CVE-2007-1453 CVE-2007-1454 CVE-2007-1521 CVE-2007-1583 CVE-2007-1700 CVE-2007-1711 CVE-2007-1718 CVE-2007-1777 CVE-2007-1824 CVE-2007-1887 CVE-2007-1889 CVE-2007-1900 CVE-2007-1522}
	[etch] - php5 5.2.0-8+etch3
[26 Apr 2007] DSA-1282-1 php4
	{CVE-2007-1286 CVE-2007-1380 CVE-2007-1521 CVE-2007-1583 CVE-2007-1711 CVE-2007-1718 CVE-2007-1777}
	[sarge] - php4 4:4.3.10-20
	[etch] - php4 6:4.4.4-8+etch2
[25 Apr 2007] DSA-1281-1 clamav - several vulnerabilities
	{CVE-2007-1745 CVE-2007-1997 CVE-2007-2029}
	[sarge] - clamav 0.84-2.sarge.16
	[etch] - clamav 0.90.1-3etch1
[24 Apr 2007] DSA-1280-1 aircrack-ng - buffer overflow
        {CVE-2007-2057}
        [etch] - aircrack-ng 1:0.6.2-7etch1
[22 Apr 2007] DSA-1279-1 webcalendar - missing input sanitising
        {CVE-2006-6669}
        [sarge] - webcalendar 0.9.45-4sarge7
[06 Apr 2007] DSA-1278-1 man-db - buffer overflow
	{CVE-2006-4250}
	[sarge] - man-db 2.4.2-21sarge1
[04 Apr 2007] DSA-1277-1 xmms - several
	{CVE-2007-0654 CVE-2007-0653}
	[sarge] - xmms 1.2.10+cvs20050209-2sarge1
	[etch] - xmms 1:1.2.10+20061101-1etch1
[03 Apr 2007] DSA-1276-1 krb5 - several vulnerabilities
	{CVE-2007-0956 CVE-2007-0957 CVE-2007-1216}
	[sarge] - krb5 1.3.6-2sarge4
	[etch] - krb5 1.4.4-7etch1
[02 Apr 2007] DSA-1275-1 zope2.7 - cross-site scripting
	{CVE-2007-0240}
	[sarge] - zope2.7 2.7.5-2sarge4
[02 Apr 2007] DSA-1274-1 file - buffer overflow
	{CVE-2007-1536}
	[sarge] - file 4.12-1sarge1
	[etch] - file 4.17-5etch1
[27 Mar 2007] DSA-1273-1 nas - several vulnerabilities
        {CVE-2007-1543 CVE-2007-1544 CVE-2007-1545 CVE-2007-1546 CVE-2007-1547}
        [sarge] - nas 1.7-2sarge1
[22 Mar 2007] DSA-1272-1 tcpdump - buffer overflow
        {CVE-2007-1218}
        [sarge] - tcpdump 3.8.3-5sarge2
[20 Mar 2007] DSA-1271-1 openafs - design error
        {CVE-2007-1507}
        [sarge] - openafs 1.3.81-3sarge2
[20 Mar 2007] DSA-1270-1 openoffice.org - several vulnerabilities
        {CVE-2007-0002 CVE-2007-0238 CVE-2007-0239}
        [sarge] - openoffice.org 1.1.3-9sarge6
[18 Mar 2007] DSA-1269-1 lookup-el - insecure temporary file
        {CVE-2007-0237}
        [sarge] - lookup-el 1.4-3sarge1
[17 Mar 2007] DSA-1268-1 libwpd - integer overflow
        {CVE-2007-0002}
        [sarge] - libwpd 0.8.1-1sarge1
        [etch] - libwpd 0.8.7-6
[15 Mar 2006] DSA-1267-1 webcalendar - missing input sanitising
        {CVE-2007-1343}
        [sarge] - webcalendar 0.9.45-4sarge6
[13 Mar 2007] DSA-1266-1 gnupg - several vulnerabilities
        {CVE-2007-1263}
        [sarge] - gnupg 1.4.1-1.sarge7
[10 Dec 2006] DSA-1265-1 mozilla
	{CVE-2006-6497 CVE-2006-6498 CVE-2006-6499 CVE-2006-6501 CVE-2006-6502 CVE-2006-6503 CVE-2006-6505}
	[sarge] - mozilla 2:1.7.8-1sarge10
[07 Mar 2007] DSA-1264-1 php4
	{CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988}
	[sarge] - php4 4:4.3.10-19
[06 Mar 2007] DSA-1263-1 clamav
	{CVE-2007-0897 CVE-2007-0898 CVE-2007-0899}
	[sarge] - clamav 0.84-2.sarge.15
	NOTE: We fixed the issue, but it's not 100% confirmed, that this is -0899
[04 Mar 2007] DSA-1262-1 gnomemeeting
        {CVE-2007-1007}
        [sarge] - gnomemeeting 1.2.1-1sarge1
[16 Feb 2007] DSA-1261-1 postgresql
        {CVE-2007-0555}
        [sarge] - postgresql 7.4.7-6sarge4
[14 Feb 2007] DSA-1260 imagemagick
	{CVE-2007-0770}
	[sarge] - imagemagick 6:6.0.6.2-2.9
[14 Feb 2007] DSA-1259-1 fetchmail
	{CVE-2006-5867}
	[sarge] - fetchmail 6.2.5-12sarge5
[07 Feb 2007] DSA-1258-1 mozilla-thunderbird
	{CVE-2006-6497 CVE-2006-6498 CVE-2006-6499 CVE-2006-6501 CVE-2006-6502 CVE-2006-6503}
	[sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8e.2
[05 Feb 2007] DSA-1257 samba
        {CVE-2007-0452 CVE-2007-0454}
        [sarge] - samba 3.0.14a-3sarge4
[31 Jan 2007] DSA-1256-1 gtk+2.0
	{CVE-2007-0010}
	[sarge] - gtk+2.0 2.6.4-3.2
[31 Jan 2007] DSA-1255-1 libgtop2
	{CVE-2007-0235}
	[sarge] - libgtop2 2.6.0-4sarge1
[27 Jan 2007] DSA-1254-1 bind9
	{CVE-2007-0494}
	[sarge] - bind9 1:9.2.4-1sarge2
[27 Jan 2007] DSA-1253-1 mozilla-firefox
	{CVE-2006-6497 CVE-2006-6498 CVE-2006-6499 CVE-2006-6501 CVE-2006-6502 CVE-2006-6503}
	[sarge] - mozilla-firefox 1.0.4-2sarge15
[27 Jan 2007] DSA-1252-1 vlc
	{CVE-2007-0017}
	[sarge] - vlc 0.8.1.svn20050314-1sarge2
	[etch] - vlc 0.8.6-svn20061012.debian-3
[21 Jan 2007] DSA-1251-1 netrik
	{CVE-2006-6678}
	[sarge] - netrik 1.15.3-1sarge1
[17 Jan 2007] DSA-1250-1 cacti
	{CVE-2006-6799}
	[sarge] - cacti 0.8.6c-7sarge4
[15 Jan 2007] DSA-1249-1 xfree86
	{CVE-2006-6101 CVE-2006-6102 CVE-2006-6103}
	[sarge] - xfree86 4.3.0.dfsg.1-14sarge3
[12 Jan 2007] DSA-1248-1 libsoup
	{CVE-2006-5876}
	[sarge] - libsoup 2.2.3-2sarge1
[08 Jan 2007] DSA-1247-1 libapache-mod-auth-kerb
	{CVE-2006-5989}
	[sarge] - libapache-mod-auth-kerb 4.996-5.0-rc6-1sarge1
[08 Jan 2007] DSA-1246-1 openoffice.org
	{CVE-2006-5870}
	[sarge] - openoffice.org 1.1.3-9sarge4
[07 Jan 2007] DSA-1245-1 proftpd
	{CVE-2005-4816}
	[sarge] - proftpd 1.2.10-15sarge4
[28 Dec 2006] DSA-1244-1 xine-lib
	{CVE-2006-6172}
        [sarge] - xine-lib 1.0.1-1sarge5
[28 Dec 2006] DSA-1243-1 evince
	{CVE-2006-5864}
        [sarge] - evince 0.1.5-2sarge1
[27 Dec 2006] DSA-1242-1 elog
	{CVE-2006-5063 CVE-2006-5790 CVE-2006-5791 CVE-2006-6318}
        [sarge] - elog 2.5.7+r1558-4+sarge3
[25 Dec 2006] DSA-1241-1 squirrelmail
	{CVE-2006-6142}
        [sarge] - squirrelmail 2:1.4.4-10
[21 Dec 2006] DSA-1240-1 links2
	{CVE-2006-5925}
	[sarge] - links2 2.1pre16-1sarge1
[17 Dec 2006] DSA-1239-1 sql-ledger
	{CVE-2006-4244 CVE-2006-4731 CVE-2006-5872}
	[sarge] - sql-ledger 2.4.7-2sarge1
[17 Dec 2006] DSA-1238-1 clamav
	{CVE-2006-6406 CVE-2006-6481}
	[sarge] - clamav 0.84-2.sarge.13
[17 Dec 2006] DSA-1237 kernel-source-2.4.27 - several
        {CVE-2006-4093 CVE-2006-4538 CVE-2006-4997 CVE-2006-5174 CVE-2006-5649 CVE-2006-5871}
        [sarge] - kernel-source-2.6.8 2.6.8-16sarge6
[13 Dec 2006] DSA-1236-1 enemies-of-carlotta
	{CVE-2006-5875}
	[sarge] - enemies-of-carlotta 1.0.3-1sarge1
[13 Dec 2006] DSA-1235-1 ruby1.8
	{CVE-2006-5467}
	[sarge] - ruby1.8 1.8.2-7sarge5
[13 Dec 2006] DSA-1234-1 ruby1.6
	{CVE-2006-5467}
	[sarge] - ruby1.6 1.6.8-12sarge3
[10 Dec 2006] DSA-1233 kernel-source-2.6.8 - several
        {CVE-2006-3741 CVE-2006-4538 CVE-2006-4813 CVE-2006-4997 CVE-2006-5174 CVE-2006-5619 CVE-2006-5649 CVE-2006-5751 CVE-2006-5871}
        [sarge] - kernel-source-2.6.8 2.6.8-16sarge6
[09 Dec 2006] DSA-1232-1 clamav
	{CVE-2006-5874}
	[sarge] - clamav 0.84-2.sarge.12
[09 Dec 2006] DSA-1231-1 gnupg
	{CVE-2006-6169 CVE-2006-6235}
	[sarge] - gnupg 1.4.1-1.sarge6
[08 Dec 2006] DSA-1230-1 l2tpns
	{CVE-2006-5873}
	[sarge] - l2tpns 2.0.14-1sarge1
[06 Dec 2006] DSA-1229-1 asterisk
	{CVE-2006-5444}
	[sarge] - asterisk 1:1.0.7.dfsg.1-2sarge4
[05 Dec 2006] DSA-1228-1 elinks
	{CVE-2006-5925}
	[sarge] - elinks 0.10.4-7.1
[04 Dec 2006] DSA-1227-1 mozilla-thunderbird
	{CVE-2006-4310 CVE-2006-5462 CVE-2006-5463 CVE-2006-5464 CVE-2006-5748}
	[sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8d.1
[03 Dec 2006] DSA-1226-1 links
	{CVE-2006-5925}
	[sarge] - links 0.99+1.00pre12-1sarge1
[03 Dec 2006] DSA-1225-1 mozilla-firefox
	{CVE-2006-4310 CVE-2006-5462 CVE-2006-5463 CVE-2006-5464 CVE-2006-5748}
	[sarge] - mozilla-firefox 1.0.4-2sarge13
[03 Dec 2006] DSA-1224-1 mozilla
	{CVE-2006-4310 CVE-2006-5462 CVE-2006-5463 CVE-2006-5464 CVE-2006-5748}
	[sarge] - mozilla 2:1.7.8-1sarge8
[01 Dec 2006] DSA-1223-1 tar
	{CVE-2006-6097}
	[sarge] - tar 1.14-2.3
[30 Nov 2006] DSA-1222-1 proftpd
	{CVE-2006-5815 CVE-2006-6170}
	[sarge] - proftpd 1.2.10-15sarge3
[30 Nov 2006] DSA-1221-1 libgsf
	{CVE-2006-4514}
	[sarge] - libgsf 1.11.1-1sarge1
[27 Nov 2006] DSA-1220 pstotext 
	{CVE-2006-5869}
	[sarge] - pstotext 1.9-1sarge2
[27 Nov 2006] DSA-1219 texinfo
	{CVE-2005-3011 CVE-2006-4810}
	[sarge] - texinfo 4.7-2.2sarge2
[21 Nov 2006] DSA-1218 proftpd
	{CVE-2006-6171}
	[sarge] - proftpd 1.2.10-15sarge2
[20 Nov 2006] DSA-1217 linux-ftpd
	{CVE-2006-5778 CVE-2006-6008}
	[sarge] - linux-ftpd 0.17-20sarge2
[20 Nov 2006] DSA-1216 flexbackup
	{CVE-2005-4802}
	[sarge] - flexbackup 1.2.1-2sarge1
[20 Nov 2006] DSA-1215 xine-lib
	{CVE-2006-4799 CVE-2006-4800}
	[sarge] - xine-lib 1.0.1-1sarge4
[20 Nov 2006] DSA-1214 gv 
	{CVE-2006-5864}
	[sarge] - gv 1:3.6.1-10sarge2
[19 Nov 2006] DSA-1213 imagemagick
	{CVE-2006-0082 CVE-2006-4144 CVE-2006-5456 CVE-2006-5868}
	[sarge] - imagemagick 6:6.0.6.2-2.8
[15 Nov 2006] DSA-1212 openssh
	{CVE-2006-4924 CVE-2006-5051}
	[sarge] - openssh 1:3.8.1p1-8.sarge.6
[14 Nov 2006] DSA-1211 pdns
	{CVE-2006-4251}
	[sarge] - pdns 2.9.17-13sarge3
[14 Nov 2006] DSA-1210 mozilla-firefox
	{CVE-2006-2788 CVE-2006-4340 CVE-2006-4565 CVE-2006-4566 CVE-2006-4568 CVE-2006-4571}
	[sarge] - mozilla-firefox 1.0.4-2sarge12
[12 Nov 2006] DSA-1209 trac
	{CVE-2006-5878}
	[sarge] - trac 0.8.1-3sarge6
[11 Nov 2006] DSA-1208-1 bugzilla
	{CVE-2005-4534 CVE-2006-5453}
	[sarge] - bugzilla 2.16.7-7sarge2
[09 Nov 2006] DSA-1207-1 phpmyadmin
	{CVE-2006-1678 CVE-2006-2418 CVE-2005-3621 CVE-2005-3665 CVE-2006-5116}
	[sarge] - phpmyadmin 4:2.6.2-3sarge2
[06 Nov 2006] DSA-1206-1 php4
	{CVE-2005-3353 CVE-2006-3017 CVE-2006-4482 CVE-2006-5465}
	[sarge] - php4 4:4.3.10-18
[02 Nov 2006] DSA-1205-1 thttpd - insecure temporary files
	{CVE-2006-4248}
	[sarge] - thttpd 2.23beta1-3sarge2
[02 Nov 2006] DSA-1204-1 ingo1
	{CVE-2006-5449}
	[sarge] - ingo1 1.0.1-1sarge1
[02 Nov 2006] DSA-1203-1 libpam-ldap
	{CVE-2006-5170}
	[sarge] - libpam-ldap 178-1sarge3
[31 Oct 2006] DSA-1202-1 screen - programming error
	{CVE-2006-4573}
	[sarge] - screen 4.0.2-4.1sarge1
[31 Oct 2006] DSA-1201-1 ethereal - several vulnerabilities
	{CVE-2005-4574 CVE-2006-4805}
	[sarge] - ethereal 0.10.10-2sarge9
[30 Oct 2006] DSA-1200-1 qt-x11-free - integer overflow
	{CVE-2006-4811}
	[sarge] - qt-x11-free 3:3.3.4-3sarge1
[23 Oct 2006] DSA-1199-1 webmin
	{CVE-2005-3912 CVE-2006-3392 CVE-2006-4542}
	[sarge] - webmin 1.180-3sarge1
[23 Oct 2006] DSA-1198-1 python2.3
	{CVE-2006-4980}
	[sarge] - python2.3 2.3.5-3sarge2
[22 Oct 2006] DSA-1197-1 python2.4
	{CVE-2006-4980}
	[sarge] - python2.4 2.4.1-2sarge1
[19 Oct 2006] DSA-1196-1 clamav
	{CVE-2006-4182 CVE-2006-5295}
	[sarge] - clamav 0.84-2.sarge.11
[10 Oct 2006] DSA-1195-1 openssl096
	{CVE-2006-2940 CVE-2006-3738 CVE-2006-4343}
	[sarge] - openssl096 0.9.6m-1sarge4
[09 Oct 2006] DSA-1194-1 libwmf
	{CVE-2006-3376}
	[sarge] - libwmf 0.2.8.3-2sarge1
[09 Oct 2006] DSA-1193-1 xfree86
	{CVE-2006-3467 CVE-2006-3739 CVE-2006-3740 CVE-2006-4447}
	[sarge] - xfree86 4.3.0.dfsg.1-14sarge2
[06 Oct 2006] DSA-1192-1 mozilla
	{CVE-2006-2788 CVE-2006-4340 CVE-2006-4565 CVE-2006-4566 CVE-2006-4568 CVE-2006-4570 CVE-2006-4571}
	[sarge] - mozilla 2:1.7.8-1sarge7.3.1
[05 Oct 2006] DSA-1191-1 mozilla-thunderbird
	{CVE-2006-2788 CVE-2006-4340 CVE-2006-4565 CVE-2006-4566 CVE-2006-4568 CVE-2006-4570 CVE-2006-4571}
	[sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8c.1
[04 Oct 2006] DSA-1190-1 maxdb-7.5.00
	{CVE-2006-4305}
	[sarge] - maxdb-7.5.00 7.5.00.24-4
[04 Oct 2006] DSA-1189-1 openssh-krb5
	{CVE-2006-4924 CVE-2006-5051}
	[sarge] - openssh-krb5 3.8.1p1-7sarge1
[04 Oct 2006] DSA-1188-1 mailman
	{CVE-2006-3636 CVE-2006-4624}
	[sarge] - mailman 2.1.5-8sarge5
[30 Sep 2006] DSA-1187-1 migrationtools
	{CVE-2006-0512}
	[sarge] - migrationtools 46-1sarge1
[30 Sep 2006] DSA-1186-1 cscope 
	{CVE-2006-4262}
	[sarge] - cscope 15.5-1.1sarge2
[28 Sep 2006] DSA-1185-2 openssl
	{CVE-2006-2940 CVE-2006-3738 CVE-2006-4343 CVE-2006-2937}
	[sarge] - openssl 0.9.7e-3sarge4
	NOTE: First DSA had a minor regression
[22 Sep 2006] DSA-1182-1 gnutls11
	{CVE-2006-4790}
	[sarge] - gnutls11 1.0.16-13.2sarge2 
[19 Sep 2006] DSA-1181-1 gzip
	{CVE-2006-4334 CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 CVE-2006-4338}
	[sarge] - gzip 1.3.5-10sarge2
[19 Sep 2006] DSA-1180-1 bomberclone
	{CVE-2006-4005 CVE-2006-4006}
	[sarge] - bomberclone 0.11.5-1sarge2
[16 Sep 2006] DSA-1179-1 alsaplayer
	{CVE-2006-4089}
	[sarge] - alsaplayer 0.99.76-0.3sarge1
[16 Sep 2006] DSA-1178-1 freetype
	{CVE-2006-3467}
	[sarge] - freetype 2.1.7-6
[15 Sep 2006] DSA-1177-1 usermin
	{CVE-2006-4246}
	[sarge] - usermin 1.110-3.1
[13 Sep 2006] DSA-1176-1 zope2.7
	{CVE-2006-4684}
	[sarge] - zope2.7 2.7.5-2sarge2
[13 Sep 2006] DSA-1175-1 isakmpd
	{CVE-2006-4436}
	[sarge] - isakmpd 20041012-1sarge1
[11 Sep 2006] DSA-1174-1 openssl096 - cryptographic weakness
	{CVE-2006-4339}
	[sarge] - openssl096 0.9.6m-1sarge2
[10 Sep 2006] DSA-1173-1 openssl - cryptographic weakness
	{CVE-2006-4339}
	[sarge] - openssl 0.9.7e-3sarge2
[09 Sep 2006] DSA-1172-1 bind9 - programming error
	{CVE-2006-4095 CVE-2006-4096}
	[sarge] - bind9 1:9.2.4-1sarge1
[07 Sep 2006] DSA-1171 ethereal - several
        {CVE-2006-4333 CVE-2005-3241 CVE-2005-3242 CVE-2005-3243 CVE-2005-3244 CVE-2005-3246 CVE-2005-3248 CVE-2005-3249}
        [sarge] - ethereal 0.10.10-2sarge8
[06 Sep 2006] DSA-1170 gcc-3.4 - missing sanity check
        {CVE-2006-3619}
        [sarge] - gcc-3.4 3.4.3-13sarge1
[05 Sep 2006] DSA-1169 mysql-dfsg-4.1 - several
        {CVE-2006-4226 CVE-2006-4380}
        [sarge] - mysql-dfsg-4.1 4.1.11a-4sarge7
[04 Sep 2006] DSA-1168-1 imagemagick
        {CVE-2006-2440 CVE-2006-3743 CVE-2006-3744}
        [sarge] - imagemagick 6:6.0.6.2-2.7
[04 Sep 2005] DSA-1167-1 apache - missing input sanitising
	{CVE-2005-3352 CVE-2006-3918}
	[sarge] - apache 1.3.33-6sarge3
[03 Sep 2006] DSA-1166 cheesetracker - buffer overflow
	{CVE-2006-3814}
	[sarge] - cheesetracker 0.9.9-1sarge1
[01 Sep 2006] DSA-1165 capi4hylafax - missing input sanitising
	{CVE-2006-3126}
	[sarge] - capi4hylafax 1:01.02.03-10sarge2
[31 Aug 2006] DSA-1164 sendmail - programming error
	{CVE-2006-4434}
	[sarge] - sendmail 8.13.4-3sarge3
[30 Aug 2006] DSA-1163 gtetrinet - programming error
	{CVE-2006-3125}
	[sarge] - gtetrinet 0.7.8-1sarge2
[30 Aug 2006] DSA-1162 libmusicbrainz-2.0 - buffer overflows
	{CVE-2006-4197}
	[sarge] - libmusicbrainz-2.1 2.1.1-3sarge1
	[sarge] - libmusicbrainz-2.0 2.0.2-10sarge1
[29 Aug 2006] DSA-1161 mozilla-firefox - several vulnerabilities
	{CVE-2006-3805 CVE-2006-3806 CVE-2006-3807 CVE-2006-3808 CVE-2006-3809 CVE-2006-3811}
	[sarge] - mozilla-firefox 1.0.4-2sarge11
[29 Aug 2006] DSA-1160 mozilla - several
        {CVE-2006-2779 CVE-2006-3805 CVE-2006-3806 CVE-2006-3807 CVE-2006-3808 CVE-2006-3809 CVE-2006-3811}
        [sarge] - mozilla 2:1.7.8-1sarge7.2.2
[28 Aug 2006] DSA-1159 mozilla-thunderbird - several
        {CVE-2006-2779 CVE-2006-3805 CVE-2006-3806 CVE-2006-3807 CVE-2006-3808 CVE-2006-3809 CVE-2006-3810 CVE-2006-3811}
        [sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8b.1
[27 Aug 2006] DSA-1158 streamripper
        {CVE-2006-3124}
        [sarge] - streamripper 1.61.7-1sarge1
[27 Aug 2006] DSA-1157 ruby1.8
        {CVE-2006-3694 CVE-2006-1931}
        [sarge] - ruby1.8 1.8.2-7sarge4
[27 Aug 2006] DSA-1156 kdebase 
        {CVE-2006-2449}
        [sarge] - kdebase 4:3.3.2-1sarge3
[24 Aug 2006] DSA-1155 sendmail - programming error
        {CVE-2006-1173}
        [sarge] - sendmail 8.13.4-3sarge2
[20 Aug 2006] DSA-1154 squirrelmail - variable overwriting
        {CVE-2006-4019}
        [sarge] - squirrelmail 2:1.4.4-9
[18 Aug 2006] DSA-1153 clamav - buffer overflow
        {CVE-2006-4018}
        [sarge] - clamav 0.84-2.sarge.10
[18 Aug 2006] DSA-1152 trac - missing input sanitising
	{CVE-2006-3695}
	[sarge] - trac 0.8.1-3sarge5
[15 Aug 2006] DSA-1151-1 heartbeat - out-of-bounds read
	{CVE-2006-3121}
	[sarge] - heartbeat 1.2.3-9sarge6
[12 Aug 2006] DSA-1150-1 shadow - programming error
	{CVE-2006-3378}
	[sarge] - shadow 1:4.0.3-31sarge8
[10 Aug 2006] DSA-1149-1 ncompress - buffer underflow
	{CVE-2006-1168}
	[sarge] - ncompress 4.2.4-15sarge2
[09 Aug 2006] DSA-1148-1 gallery - several vulnerabilities
	{CVE-2005-2734 CVE-2006-0330 CVE-2006-4030}
	[sarge] - gallery 1.5-1sarge2
[09 Aug 2006] DSA-1147-1 drupal - missing input sanitising
	{CVE-2006-4002}
	[sarge] - drupal 4.5.3-6.1sarge3
[09 Aug 2006] DSA-1146-1 krb5 - programming error
	{CVE-2006-3083 CVE-2006-3084}
 	[sarge] - krb5 1.3.6-2sarge3
[08 Aug 2006] DSA-1145-1 freeradius - several
        {CVE-2005-4745 CVE-2005-4746}
        [sarge] - freeradius 1.0.2-4sarge3
[07 Aug 2006] DSA-1144-1 chmlib - missing input sanitising
        {CVE-2006-3178}
        [sarge] - chmlib 0.35-6sarge3
[04 Aug 2006] DSA-1143-1 dhcp - programming error
        {CVE-2006-3122}
        [sarge] - dhcp 2.0pl5-19.1sarge2
[04 Aug 2006] DSA-1142-1 freeciv - missing bouncary checks
        {CVE-2006-3913}
        [sarge] - freeciv 2.0.1-1sarge2
[04 Aug 2006] DSA-1141-1 gnupg2 - integer overflow
        {CVE-2006-3746}
        [sarge] - gnupg2 1.9.15-6sarge2
[03 Aug 2006] DSA-1140-1 gnupg - integer overflow
        {CVE-2006-3746}
        [sarge] - gnupg 1.4.1-1.sarge5
[03 Aug 2006] DSA-1139-1 ruby1.6 - missing privilege checks
        {CVE-2006-3694}
        [sarge] - ruby1.6 1.6.8-12sarge2
[02 Aug 2006] DSA-1138-1 cfs - integer overflow
        {CVE-2006-3123}
        [sarge] - cfs 1.4.1-15sarge1
[02 Aug 2006] DSA-1137-1 tiff - several vulnerabilities
        {CVE-2006-3459 CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465}
        [sarge] - tiff 3.7.2-7
[02 Aug 2006] DSA-1136-1 gpdf - wrong input sanitising
        {CVE-2005-2097}
        [sarge] - gpdf 2.8.2-1.2sarge5
[02 Aug 2006] DSA-1135-1 libtunepimp - buffer overflow
        {CVE-2006-3600}
        [sarge] - libtunepimp 0.3.0-3sarge2
[02 Aug 2006] DSA-1134-1 mozilla-thunderbird - several vulnerabilities
        {CVE-2006-1729 CVE-2006-1942 CVE-2006-2775 CVE-2006-2776 CVE-2006-2777 CVE-2006-2778 CVE-2006-2779 CVE-2006-2780 CVE-2006-2781 CVE-2006-2782 CVE-2006-2783 CVE-2006-2784 CVE-2006-2785 CVE-2006-2786 CVE-2006-2787}
        [sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8a
[01 Aug 2006] DSA-1133-1 mantis - cross site scripting
        {CVE-2006-0664 CVE-2006-0665 CVE-2006-0841 CVE-2006-1577}
        [sarge] - mantis 0.19.2-5sarge4.1
[01 Aug 2006] DSA-1132-1 apache2 - buffer overflow
        {CVE-2006-3747}
        [sarge] - apache2 2.0.54-5sarge1
[01 Aug 2006] DSA-1131-1 apache - buffer overflow
        {CVE-2006-3747}
        [sarge] - apache 1.3.33-6sarge2
[30 Jul 2006] DSA-1130-1 sitebar - missing input validation
        {CVE-2006-3320}
        [sarge] - sitebar 3.2.6-7.1
[28 Jul 2006] DSA-1129 osiris - format string
        {CVE-2006-3120}
        [sarge] - osiris 4.0.6-1sarge1
[28 Jul 2006] DSA-1128 heartbeat - permission error
        {CVE-2006-3815}
        [sarge] - heartbeat 1.2.3-9sarge5
[28 Jul 2006] DSA-1127 ethereal - several
        {CVE-2006-3628 CVE-2006-3629 CVE-2006-3630 CVE-2006-3631 CVE-2006-3632}
        [sarge] - ethereal 0.10.10-2sarge6
[27 Jul 2006] DSA-1126 asterisk - several
        {CVE-2006-2898}
        [sarge] - asterisk 1:1.0.7.dfsg.1-2sarge3
[26 Jul 2006] DSA-1125 drupal - several
        {CVE-2006-2742 CVE-2006-2743 CVE-2006-2831 CVE-2006-2832 CVE-2006-2833}
        [sarge] - drupal 4.5.3-6.1sarge1
[24 Jul 2006] DSA-1124 fbi - typo
        {CVE-2006-3119}
        [sarge] - fbi 2.01-1.2sarge2
[24 Jul 2006] DSA-1123 libdumb - buffer overflow
        {CVE-2006-3668}
        [sarge] - libdumb 1:0.9.2-6
[24 Jul 2006] DSA-1122 libnet-server-perl - format string
        {CVE-2005-1127}
        [sarge] - libnet-server-perl 0.87-3sarge1
[24 Jul 2006] DSA-1121 postgrey - format string
        {CVE-2005-1127}
        [sarge] - postgrey 1.21-1sarge1
        NOTE: also fixed in 1.21-1volatile4
[23 Jul 2006] DSA-1120 mozilla-firefox - several vulnerabilities
        {CVE-2006-1942 CVE-2006-2775 CVE-2006-2776 CVE-2006-2777 CVE-2006-2778 CVE-2006-2779 CVE-2006-2780 CVE-2006-2782 CVE-2006-2783 CVE-2006-2784 CVE-2006-2785 CVE-2006-2786 CVE-2006-2787}
        [sarge] - mozilla-firefox 1.0.4-2sarge9
[23 Jul 2006] DSA-1119 hiki - design flaw
        {CVE-2006-3379}
        [sarge] - hiki 0.6.5-2
[22 Jul 2006] DSA-1118 mozilla - several
        {CVE-2006-1942 CVE-2006-2775 CVE-2006-2776 CVE-2006-2777 CVE-2006-2778 CVE-2006-2779 CVE-2006-2780 CVE-2006-2781 CVE-2006-2782 CVE-2006-2783 CVE-2006-2784 CVE-2006-2785 CVE-2006-2786 CVE-2006-2787}
        [sarge] - mozilla 2:1.7.8-1sarge7.1
[21 Jul 2006] DSA-1117 libgd2 - insufficient input sanitising
        {CVE-2006-2906}
        [sarge] - libgd2 2.0.33-1.1sarge1
[21 Jul 2006] DSA-1116 gimp - buffer overflow
        {CVE-2006-3404}
        [sarge] - gimp 2.2.6-1sarge1
[21 Jul 2006] DSA-1115 gnupg2 - integer overflow
        {CVE-2006-3082}
        [sarge] - gnupg 1.4.1-1.sarge4
        [sarge] - gnupg2 1.9.15-6sarge1
[21 Jul 2006] DSA-1114 hashcash - buffer overflow
        {CVE-2006-3251}
        [sarge] - hashcash 1.17-1sarge1
[18 Jul 2006] DSA-1113 zope2.7 - programming error
        {CVE-2006-3458}
        [sarge] - zope2.7 2.7.5-2sarge2
[18 Jul 2006] DSA-1112 mysql-dfsg-4.1 - several vulnerabilities
        {CVE-2006-3081 CVE-2006-3469}
        [sarge] - mysql-dfsg-4.1 4.1.11a-4sarge5
[16 Jul 2006] DSA-1111 kernel-source-2.6.8 - race condition
        {CVE-2006-3626}
        [sarge] - kernel-source-2.6.8 2.6.8-16sarge4
[16 Jul 2006] DSA-1110 samba - missing input sanitising
        {CVE-2006-3403}
        [sarge] - samba 3.0.14a-3sarge2
[16 Jul 2006] DSA-1109 rssh - programming error
        {CVE-2006-1320}
        [sarge] - rssh 2.2.3-1.sarge.2
[11 Jul 2006] DSA-1108 mutt - buffer overflow
        {CVE-2006-3242}
        [sarge] - mutt 1.5.9-2sarge2
[10 Jul 2006] DSA-1107 gnupg - integer overflow
        {CVE-2006-3082}
        [sarge] - gnupg 1.4.1-1.sarge4
[10 Jul 2006] DSA-1106 ppp - programming error
        {CVE-2006-2194}
        [sarge] - ppp 2.4.3-20050321+2sarge1
[07 Jul 2006] DSA-1105 xine-lib - buffer overflow
        {CVE-2006-2802}
        [woody] - xine-lib 0.9.8-2woody5
        [sarge] - xine-lib 1.0.1-1sarge3
[30 Jun 2006] DSA-1104 openoffice.org - several vulnerabilities
	{CVE-2006-2198 CVE-2006-2199 CVE-2006-3117}
	[sarge] - openoffice.org 1.1.3-9sarge3
[27 Jun 2006] DSA-1103 kernel-source-2.6.8 - several vulnerabilities
        {CVE-2005-3359 CVE-2006-0038 CVE-2006-0039 CVE-2006-0456 CVE-2006-0554 CVE-2006-0555 CVE-2006-0557 CVE-2006-0558 CVE-2006-0741 CVE-2006-0742 CVE-2006-0744 CVE-2006-1056 CVE-2006-1242 CVE-2006-1368 CVE-2006-1523 CVE-2006-1524 CVE-2006-1525 CVE-2006-1857 CVE-2006-1858 CVE-2006-1863 CVE-2006-1864 CVE-2006-2271 CVE-2006-2272 CVE-2006-2274}
        [sarge] - kernel-source-2.6.8 2.6.8-16sarge3
[26 Jun 2006] DSA-1102 pinball - design error
        {CVE-2006-2196}
        [sarge] - pinball 0.3.1-3sarge1
[23 Jun 2006] DSA-1101 courier - programming error
        {CVE-2006-2659}
        [woody] - courier 0.37.3-2.9
        [sarge] - courier 0.47-4sarge5
[15 Jun 2006] DSA-1100 wv2 - integer overflow
        {CVE-2006-2197}
        [sarge] - wv2 0.2.2-1sarge1
[14 Jun 2006] DSA-1099-1 - horde2 - missing input sanitising
    	{CVE-2006-2195}
	[sarge] - horde2 2.2.8-1sarge3
[14 Jun 2006] DSA-1098-1 - horde3 - missing input sanitising
    	{CVE-2006-2195}
	[sarge] - horde3 3.0.4-4sarge4
[14 Jun 2006] DSA-1097-1 kernel-source-2.4.27 - several vulnerabilities
    	{CVE-2006-0038 CVE-2006-0039 CVE-2006-0741 CVE-2006-0742 CVE-2006-1056 CVE-2006-1242 CVE-2006-1343 CVE-2006-1368 CVE-2006-1524 CVE-2006-1525 CVE-2006-1857 CVE-2006-1858 CVE-2006-1864 CVE-2006-2271 CVE-2006-2272 CVE-2006-2274}
	[sarge] - kernel-source-2.4.27 2.4.27-10sarge3
[13 Jun 2006] DSA-1096-1 webcalendar - uninitialised variable
        {CVE-2006-2762}
        [sarge] - webcalendar 0.9.45-4sarge5
[10 Jun 2006] DSA-1095-1 freetype - integer overflows
        {CVE-2006-0747 CVE-2006-1861 CVE-2006-2661}
        [woody] - freetype 2.0.9-1woody1
        [sarge] - freetype 2.1.7-2.5
[08 Jun 2006] DSA-1094-1 gforge - missing input sanitising
        {CVE-2005-2430}
        [sarge] - gforge 3.1-31sarge1
[08 Jun 2006] DSA-1093-1 xine - format string
        {CVE-2006-2230}
        [sarge] - xine-ui 0.99.3-1sarge1
[08 Jun 2006] DSA-1092-1 mysql-dfsg-4.1 - programming error
        {CVE-2006-2753}
        [sarge] - mysql-dfsg-4.1 4.1.11a-4sarge4
[08 Jun 2006] DSA-1091-1 tiff - buffer overflows
        {CVE-2006-2193 CVE-2006-2656}
        [woody] - tiff 3.5.5-7woody2
        [sarge] - tiff 3.7.2-5
[06 Jun 2006] DSA-1090-1 spamassassin - programming error
        {CVE-2006-2447}
        [sarge] - spamassassin 3.0.3-2sarge1
[03 Jun 2006] DSA-1089-1 freeradius - several vulnerabilities
        {CVE-2005-4744 CVE-2006-1354}
        [sarge] - freeradius 1.0.2-4sarge1
[03 Jun 2006] DSA-1088-1 centericq - buffer overflow
        {CVE-2005-3863}
        [woody] - centericq 4.5.1-1.1woody2
        [sarge] - centericq 4.20.0-1sarge4
[03 Jun 2006] DSA-1087-1 postgresql - programming error
        {CVE-2006-2313 CVE-2006-2314}
        [sarge] - postgresql 7.4.7-6sarge2
[02 Jun 2006] DSA-1086-1 xmcd - design flaw
        {CVE-2006-2542}
        [woody] - xmcd 2.6-14woody1
        [sarge] - xmcd 2.6-17sarge1
[01 Jun 2006] DSA-1085-1 lynx-cur - several vulnerabilities
        {CVE-2005-3120}
        [woody] - lynx-cur 2.8.5-2.5woody1
        [sarge] - lynx-cur 2.8.6-9sarge1
[31 May 2006] DSA-1084-1 typespeed - buffer overflow
        {CVE-2006-1515}
        [woody] - typespeed 0.4.1-2.4
        [sarge] - typespeed 0.4.4-8sarge1
[31 May 2006] DSA-1083-1 motor - buffer overflow
        {CVE-2005-3863}
        [woody] - motor 2:3.2.2-2woody1
        [sarge] - motor 2:3.4.0-2sarge1
[29 May 2006] DSA-1082-1 kernel-source-2.4.17 - several vulnerabilities
        {CVE-2003-0984 CVE-2004-0138 CVE-2004-0394 CVE-2004-0427 CVE-2004-0447 CVE-2004-0554 CVE-2004-0565 CVE-2004-0685 CVE-2004-0883 CVE-2004-0949 CVE-2004-0997 CVE-2004-1016 CVE-2004-1017 CVE-2004-1068 CVE-2004-1070 CVE-2004-1071 CVE-2004-1072 CVE-2004-1073 CVE-2004-1074 CVE-2004-1234 CVE-2004-1235 CVE-2004-1333 CVE-2004-1335 CVE-2005-0001 CVE-2005-0003 CVE-2005-0124 CVE-2005-0135 CVE-2005-0384 CVE-2005-0489 CVE-2005-0504}
	[woody] - kernel-source-2.4.17 2.4.17-1woody4
[29 May 2006] DSA-1081-1 libextractor - buffer overflow
        {CVE-2006-2458}
        [sarge] - libextractor 0.4.2-2sarge5
[29 May 2006] DSA-1080-1 dovecot - programming error
        {CVE-2006-2414}
        [sarge] - dovecot 0.99.14-1sarge0
[29 May 2006] DSA-1079-1 mysql-dfsg - several
        {CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518}
        [sarge] - mysql-dfsg 4.0.24-10sarge2
[27 May 2006] DSA-1078-1 tiff - out-of-bounds read
        {CVE-2006-2120}
        [sarge] - tiff 3.7.2-4
[26 May 2006] DSA-1077-1 lynx-ssl - programming error
        {CVE-2004-1617}
        [woody] - lynx-ssl 1:2.8.4.1b-3.3
[26 May 2006] DSA-1076-1 lynx - programming error
        {CVE-2004-1617}
        [woody] - lynx 2.8.4.1b-3.4
        [sarge] - lynx 2.8.5-2sarge2
[26 May 2006] DSA-1075-1 awstats - programming error
        {CVE-2006-2644 CVE-2006-1945}
        [sarge] - awstats 6.4-1sarge3 (bug #365910)
[24 May 2006] DSA-1074-1 mpg123 - buffer overflow
        {CVE-2006-1655}
        [sarge] - mpg123 0.59r-20sarge1
[22 May 2006] DSA-1073-1 mysql-dfsg-4.1 - several vulnerabilities
        {CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518}
        [sarge] - mysql-dfsg-4.1 4.1.11a-4sarge3
[22 May 2006] DSA-1072-1 nagios - buffer overflow
        {CVE-2006-2162 CVE-2006-2489}
        [sarge] - nagios 2:1.3-cvs.20050402-2.sarge.2
[22 May 2006] DSA-1071-1 mysql - several vulnerabilities
        {CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518}
        [woody] - mysql 3.23.49-8.15
[21 May 2006] DSA-1070-1 kernel-source-2.4.19 - several vulnerabilities
        {CVE-2003-0984 CVE-2004-0138 CVE-2004-0394 CVE-2004-0427 CVE-2004-0447 CVE-2004-0554 CVE-2004-0565 CVE-2004-0685 CVE-2004-0883 CVE-2004-0949 CVE-2004-0997 CVE-2004-1016 CVE-2004-1017 CVE-2004-1068 CVE-2004-1070 CVE-2004-1071 CVE-2004-1072 CVE-2004-1073 CVE-2004-1074 CVE-2004-1234 CVE-2004-1235 CVE-2004-1333 CVE-2004-1335 CVE-2005-0001 CVE-2005-0003 CVE-2005-0124 CVE-2005-0135 CVE-2005-0384 CVE-2005-0489 CVE-2005-0504}
        [woody] - kernel-image-sparc-2.4 26woody1
        [woody] - kernel-patch-2.4.19-mips 2.4.19-0.020911.1.woody5
        [woody] - kernel-source-2.4.19 2.4.19-4.woody3
[20 May 2006] DSA-1069-1 kernel-source-2.4.18 - several
	{CVE-2004-0427 CVE-2005-0489 CVE-2004-0394 CVE-2004-0447 CVE-2004-0554 CVE-2004-0565 CVE-2004-0685 CVE-2005-0001 CVE-2004-0883 CVE-2004-0949 CVE-2004-1016 CVE-2004-1333 CVE-2004-0997 CVE-2004-1335 CVE-2004-1017 CVE-2005-0124 CVE-2003-0984 CVE-2004-1070 CVE-2004-1071 CVE-2004-1072 CVE-2004-1073 CVE-2004-1074 CVE-2004-0138 CVE-2004-1068 CVE-2004-1234 CVE-2005-0003 CVE-2004-1235 CVE-2005-0504 CVE-2005-0384}
	[woody] - kernel-source-2.4.18 2.4.18-14.4
[20 May 2006] DSA-1068-1 fbi - insecure temporary file
	{CVE-2006-1695}
	[woody] - fbi 1.23woody1
	[sarge] - fbi 2.01-1.2sarge1
[20 May 2006] DSA-1067-1 kernel-source-2.4.16 - several
	{CVE-2004-0427 CVE-2005-0489 CVE-2004-0394 CVE-2004-0447 CVE-2004-0554 CVE-2004-0565 CVE-2004-0685 CVE-2005-0001 CVE-2004-0883 CVE-2004-0949 CVE-2004-1016 CVE-2004-1333 CVE-2004-0997 CVE-2004-1335 CVE-2004-1017 CVE-2005-0124 CVE-2003-0984 CVE-2004-1070 CVE-2004-1071 CVE-2004-1072 CVE-2004-1073 CVE-2004-1074 CVE-2004-0138 CVE-2004-1068 CVE-2004-1234 CVE-2005-0003 CVE-2004-1235 CVE-2005-0504 CVE-2005-0384 CVE-2005-0135}
	[woody] - kernel-source-2.4.16 2.4.16-1woody2
[19 May 2006] DSA-1066-1 phpbb2 - missing input sanitising
	{CVE-2006-1896}
	[sarge] - phpbb2 2.0.13+1-6sarge3
[19 May 2006] DSA-1065-1 hostapd - missing input sanitising
	{CVE-2006-2213}
	[sarge] - hostapd 1:0.3.7-2sarge1
[19 May 2006] DSA-1064-1 cscope - buffer overflows
	{CVE-2004-2541}
	[woody] - cscope 15.3-1woody3
	[sarge] - cscope 15.5-1.1sarge1
[19 May 2006] DSA-1063-1 phpgroupware - missing input sanitising
	{CVE-2005-2781}
	[woody] - phpgroupware 0.9.14-0.RC3.2.woody6
	[sarge] - phpgroupware 0.9.16.005-3.sarge5
[19 May 2006] DSA-1062-1 kphone - insecure file creation
	{CVE-2006-2442}
	[sarge] - kphone 1:4.1.0-2sarge1
[19 May 2006] DSA-1061-1 popfile - missing input sanitising
	{CVE-2006-0876}
	[sarge] - popfile 0.22.2-2sarge1
[19 May 2006] DSA-1060-1 kernel-patch-server - programming error
	{CVE-2006-2110}
	[sarge] - kernel-patch-vserver 1.9.5.6
[19 May 2006] DSA-1059-1 quagga - several
	{CVE-2006-2223 CVE-2006-2224 CVE-2006-2276}
	[sarge] - quagga 0.98.3-7.2
[18 May 2006] DSA-1058-1 awstats - missing input sanitising
	{CVE-2006-2237}
	[woody] - awstats <not-affected>
	[sarge] - awstats 6.4-1sarge2
[15 May 2006] DSA-1057-1 phpldapadmin - missing input sanitising
	{CVE-2006-2016}
	[sarge] - phpldapadmin 0.9.5-3sarge3
[15 May 2006] DSA-1056-1 webcalendar - verbose error message
	{CVE-2006-2247}
	[sarge] - webcalendar 0.9.45-4sarge4
[11 May 2006] DSA-1055-1 mozilla-firefox - programming error
        {CVE-2006-1993}
        [sarge] - mozilla-firefox 1.0.4-2sarge7
[09 May 2006] DSA-1054-1 tiff - several vulnerabilities
        {CVE-2006-2024 CVE-2006-2025 CVE-2006-2026}
        [woody] - tiff 3.5.5-7woody1
        [sarge] - tiff 3.7.2-3sarge1
[09 May 2006] DSA-1053-1 mozilla - programming error
        {CVE-2006-1993}
        [sarge] - mozilla 2:1.7.8-1sarge6
[08 May 2006] DSA-1052-1 cgiirc - buffer overflows
        {CVE-2006-2148}
        [sarge] - cgiirc 0.5.4-6sarge1
[04 May 2006] DSA-1051-1 mozilla-thunderbird - several vulnerabilities
        {CVE-2005-2353 CVE-2005-4134 CVE-2006-0292 CVE-2006-0293 CVE-2006-0296 CVE-2006-0748 CVE-2006-0749 CVE-2006-0884 CVE-2006-1045 CVE-2006-1723 CVE-2006-1724 CVE-2006-1727 CVE-2006-1728 CVE-2006-1729 CVE-2006-1730 CVE-2006-1731 CVE-2006-1732 CVE-2006-1733 CVE-2006-1734 CVE-2006-1735 CVE-2006-1736 CVE-2006-1737 CVE-2006-1738 CVE-2006-1739 CVE-2006-1740 CVE-2006-1741 CVE-2006-1742 CVE-2006-1790}
        [sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8
[02 May 2006] DSA-1050-1 clamav - buffer overflow
        {CVE-2006-1989}
        [sarge] - clamav 0.84-2.sarge.9
[02 May 2006] DSA-1049-1 ethereal - several vulnerabilities
        {CVE-2006-1932 CVE-2006-1933 CVE-2006-1934 CVE-2006-1935 CVE-2006-1936 CVE-2006-1937 CVE-2006-1938 CVE-2006-1939 CVE-2006-1940}
        [woody] - ethereal 0.9.4-1woody15
        [sarge] - ethereal 0.10.10-2sarge5
[01 May 2006] DSA-1048-1 asterisk - several vulnerabilities
        {CVE-2005-3559 CVE-2006-1827}
        [woody] - asterisk 0.1.11-3woody1
        [sarge] - asterisk 1:1.0.7.dfsg.1-2sarge2
[30 Apr 2006] DSA-1047-1 resmgr - programming error
	{CVE-2006-2147}
        [sarge] - resmgr 1.0-2sarge2
[27 Apr 2006] DSA-1046-1 mozilla - several
        {CVE-2006-1732 CVE-2005-2353 CVE-2005-4134 CVE-2006-0292 CVE-2006-0293 CVE-2006-0748 CVE-2006-0749 CVE-2006-0884 CVE-2006-1045 CVE-2006-1529 CVE-2006-1530 CVE-2006-1531 CVE-2006-1723 CVE-2006-1724 CVE-2006-1727 CVE-2006-1728 CVE-2006-1729 CVE-2006-1730 CVE-2006-1731 CVE-2006-1733 CVE-2006-1734 CVE-2006-1735 CVE-2006-1736 CVE-2006-1737 CVE-2006-1738 CVE-2006-1739 CVE-2006-1740 CVE-2006-1741 CVE-2006-1742 CVE-2006-1790 CVE-2006-0296}
        [sarge] - mozilla 2:1.7.8-1sarge5
[27 Apr 2006] DSA-1045-1 openvpn - design error
        {CVE-2006-1629}
        [sarge] - openvpn 2.0-1sarge3
[26 Apr 2006] DSA-1044-1 mozilla-firefox - several
        {CVE-2006-1724 CVE-2006-0292 CVE-2005-4134 CVE-2006-1741 CVE-2006-1742 CVE-2006-1737 CVE-2006-1738 CVE-2006-1739 CVE-2006-1740 CVE-2006-1736 CVE-2006-1735 CVE-2006-1734 CVE-2006-1733 CVE-2006-1732 CVE-2006-0749 CVE-2006-1731 CVE-2006-1730 CVE-2006-1729 CVE-2006-1728 CVE-2006-1727 CVE-2006-0748 CVE-2005-4720 CVE-2006-0296}
        [sarge] - mozilla-firefox 1.0.4-2sarge6
[26 Apr 2006] DSA-1043-1 abcmidi - buffer overflows
        {CVE-2006-1514}
        [woody] - abcmidi 17-1woody1
        [sarge] - abcmidi 20050101-1sarge1
[25 Apr 2006] DSA-1042-1 cyrus-sasl2 - programming error
        {CVE-2006-1721}
        [woody] - cyrus-sasl2 <not-affected>
        [sarge] - cyrus-sasl2 2.1.19-1.5sarge1
[25 Apr 2006] DSA-1041-1 abc2ps - buffer overflows
        {CVE-2006-1513}
        [woody] - abc2ps 1.3.3-2woody1
        [sarge] - abc2ps 1.3.3-3sarge1
[24 Apr 2006] DSA-1040-1 gdm - programming error
        {CVE-2006-1057}
        [sarge] - gdm 2.6.0.8-1sarge2
[24 Apr 2006] DSA-1039-1 blender - several
        {CVE-2005-3302 CVE-2005-4470}
        [sarge] - blender 2.36-1sarge1
[21 Apr 2006] DSA-1038-1 xzgv - programming error
        {CVE-2006-1060}
        [woody] - xzgv 0.7-6woody3
        [sarge] - xzgv 0.8-3sarge1
[21 Apr 2006] DSA-1037-1 zgv - programming error
        {CVE-2006-1060}
        [woody] - zgv 5.5-3woody3
        [sarge] - zgv 5.7-1.4
[17 Apr 2006] DSA-1036-1 bsdgames - buffer overflow
        {CVE-2006-1744}
        [woody] - bsdgames 2.13-7woody0
        [sarge] - bsdgames 2.7.59-7sarge1
[15 Apr 2006] DSA-1035-1 fcheck - insecure temporary file
        {CVE-2006-1753}
        [woody] - fcheck <not-affected>
        [sarge] - fcheck 2.7.59-7sarge1
[14 Apr 2006] DSA-1034-1 horde2 - several vulnerabilities
        {CVE-2006-1260 CVE-2006-1491}
        [sarge] - horde2 2.2.8-1sarge2
[12 Apr 2006] DSA-1033-1 horde3 - several vulnerabilities
        {CVE-2005-4190 CVE-2006-1260 CVE-2006-1491}
        [sarge] - horde3 3.0.4-4sarge3
[12 Apr 2006] DSA-1032-1 zope-cmfplone - programming error
        {CVE-2006-1711}
        [sarge] - zope-cmfplone 2.0.4-3sarge1
[08 Apr 2006] DSA-1031-1 cacti - several
	{CVE-2006-0146 CVE-2006-0147 CVE-2006-0410 CVE-2006-0806}
	[sarge] - cacti 0.8.6c-7sarge3
[08 Apr 2006] DSA-1030-1 moodle - several
	{CVE-2006-0146 CVE-2006-0147 CVE-2006-0410 CVE-2006-0806}
	[sarge] - moodle 1.4.4.dfsg.1-3sarge1
[08 Apr 2006] DSA-1029-1 libphp-adodb - several
	{CVE-2006-0146 CVE-2006-0147 CVE-2006-0410 CVE-2006-0806}
	[woody] - libphp-adodb 1.51-1.2
	[sarge] - libphp-adodb 4.52-1sarge1
[07 Apr 2006] DSA-1028-1 libimager-perl - denial of service
	{CVE-2006-0053}
	[sarge] - libimager-perl 0.44-1sarge1
[06 Apr 2006] DSA-1027-1 mailman - programming error
	{CVE-2006-0052}
	[woody] - mailman <not-affected> (Vulnerable code not present)
	[sarge] - mailman 2.1.5-8sarge2
[06 Apr 2006] DSA-1026-1 sash - buffer overflows
        {CVE-2005-1849 CVE-2005-2096}
	[woody] - sash <not-affected> (Older zlib not vulnerable)
	[sarge] - sash 3.7-5sarge1
[06 Apr 2006] DSA-1025-1 dia - programming error
        {CVE-2006-1550}
	[woody] - dia 0.88.1-3woody1
	[sarge] - dia 0.94.0-7sarge3
[05 Apr 2006] DSA-1024-1 clamav - heap overflow
        {CVE-2006-1614 CVE-2006-1615 CVE-2006-1630}
	[sarge] - clamav 0.84-2.sarge.8
[05 Apr 2006] DSA-1023-1 kaffeine - buffer overflow
	{CVE-2006-0051}
	[sarge] - kaffeine 0.6-1sarge1
[04 Apr 2006] DSA-1022-1 storebackup - several
	{CVE-2005-3146 CVE-2005-3147 CVE-2005-3148}
	[sarge] - storebackup 1.18.4-2sarge1
[28 Mar 2006] DSA-1021-1 netpbm-free - insecure program execution
	{CVE-2005-2471}
	[woody] - netpbm-free 2:9.20-8.6
	[sarge] - netpbm-free 2:10.0-8sarge3
[28 Mar 2006] DSA-1020-1 flex - buffer overflow
	{CVE-2006-0459}
	[sarge] - flex 2.5.31-31sarge1
[24 Mar 2006] DSA-1019-1 koffice - several
	{CVE-2006-1244 CVE-2005-3192 CVE-2006-0301}
	[sarge] - koffice 1.3.5-4.sarge.3
[24 Mar 2006] DSA-1018-1 kernel-source-2.4.27 - several
	{CVE-2004-0887 CVE-2004-1058 CVE-2004-2607 CVE-2005-0449 CVE-2005-1761 CVE-2005-2457 CVE-2005-2555 CVE-2005-2709 CVE-2005-2973 CVE-2005-3257 CVE-2005-3783 CVE-2005-3806 CVE-2005-3848 CVE-2005-3857 CVE-2005-3858 CVE-2005-4618}
	[sarge] - kernel-source-2.4.27 2.4.27-10sarge2
	NOTE: An update 1018-2 was issued later, but it doesn't contain noteworthy data
[23 Mar 2006] DSA-1017-1 kernel-source-2.6.8 - several
	{CVE-2004-1017 CVE-2005-0124 CVE-2005-0449 CVE-2005-2457 CVE-2005-2490 CVE-2005-2555 CVE-2005-2709 CVE-2005-2800 CVE-2005-2973 CVE-2005-3044 CVE-2005-3053 CVE-2005-3055 CVE-2005-3180 CVE-2005-3181 CVE-2005-3257 CVE-2005-3356 CVE-2005-3358 CVE-2005-3783 CVE-2005-3784 CVE-2005-3806 CVE-2005-3847 CVE-2005-3848 CVE-2005-3857 CVE-2005-3858 CVE-2005-4605 CVE-2005-4618 CVE-2006-0095 CVE-2006-0096 CVE-2006-0482 CVE-2006-1066}
	[sarge] - kernel-source-2.6.8 2.6.8-16sarge2
[23 Mar 2006] DSA-1016-1 evolution - format string vulnerabilities
	{CVE-2005-2549 CVE-2005-2550}
	[woody] - evolution 1.0.5-1woody3
	[sarge] - evolution 2.0.4-2sarge1
[23 Mar 2006] DSA-1015-1 sendmail - programming error
	{CVE-2006-0058}
	[woody] - sendmail 8.12.3-7.2
	[sarge] - sendmail 8.13.4-3sarge1
[23 Mar 2006] DSA-1014-1 firebird2 - buffer overflow
	{CVE-2004-2043}
	[sarge] - firebird2 1.5.1-4sarge1
[22 Mar 2006] DSA-1013-1 snmptrapfmt - insecure temporary file
	{CVE-2006-0050}
	[woody] - snmptrapfmt 1.03woody1
	[sarge] - snmptrapfmt 1.08sarge1
	NOTE: fixed in testing at time of DSA
[21 Mar 2006] DSA-1012-1 unzip - buffer overflow
	{CVE-2005-4667}
	[woody] - unzip 5.50-1woody6
	[sarge] - unzip 5.52-1sarge4
	NOTE: not fixed in testing at time of DSA (too young)
[21 Mar 2006] DSA-1011-1 kernel-patch-server, util-vserver - missing attribute support
	{CVE-2005-4347 CVE-2005-4418}
	[sarge] - kernel-patch-vserver 1.9.5.4 
	[sarge] - util-vserver 0.30.204-5sarge3
	NOTE: not fixed in testing at the time of DSA
[21 Mar 2006] DSA-1010-1 ilohamail - missing input sanitising
	{CVE-2006-1236}
	[sarge] - ilohamail 0.8.14-0rc3sarge1
	NOTE: not fixed in testing at the time of DSA (too young)
[21 Mar 2006] DSA-1009-1 crossfire - buffer overflow
	{CVE-2006-1236}
	[woody] - crossfire 1.1.0-1woody2
	[sarge] - crossfire 1.6.0.dfsg.1-4sarge2
	NOTE: fixed in testing at the time of DSA
[17 Mar 2006] DSA-1008-1 kpdf - buffer overflow
	{CVE-2006-0746}
	[sarge] - kdegraphics 4:3.3.2-2sarge4
	NOTE: Sid is not affected according to DSA
[17 Mar 2006] DSA-1007-1 drupal - several
	{CVE-2006-1225 CVE-2006-1226 CVE-2006-1227 CVE-2006-1228}
	[sarge] - drupal 4.5.3-6
	NOTE: not fixed in testing at the time of DSA (too young)
[16 Mar 2006] DSA-1006-1 wzdftpd - missing input sanitising
	{CVE-2005-3081}
	[sarge] - wzdftpd 0.5.2-1.1sarge1
	NOTE: fixed in testing at the time of DSA
[16 Mar 2006] DSA-1005-1 xine-lib - buffer overflow
	{CVE-2005-4048}
	[woody] - xine-lib <not-affected>
	[sarge] - xine-lib 1.0.1-1sarge2
	NOTE: fixed in testing at the time of DSA
[16 Mar 2006] DSA-1004-1 vlc - buffer overflow
	{CVE-2005-4048}
	[woody] - vlc <not-affected>
	[sarge] - vlc 0.8.1.svn20050314-1sarge1
	NOTE: not fixed in testing at the time of DSA (waiting on deps)
[16 Mar 2006] DSA-1003-1 xpvm - insecure temporary file
	{CVE-2005-2240}
	[woody] - xpvm 1.2.5-7.2woody1
	[sarge] - xpvm 1.2.5-7.3sarge1
	NOTE: fixed in testing at the time of DSA (not in testing)
[15 Mar 2006] DSA-1002-1 webcalendar - several
	{CVE-2005-3949 CVE-2005-3961 CVE-2005-3982 CVE-2005-3984}
	[sarge] - webcalendar 0.9.45-4sarge3
	NOTE: not fixed in testing at the time of DSA (too young)
[14 Mar 2006] DSA-1001-1 crossfire - buffer overflow
	{CVE-2006-1010}
	[woody] - crossfire 1.1.0-1woody1
	[sarge] - crossfire 1.6.0.dfsg.1-4sarge1
	NOTE: not fixed in testing at the time of DSA (too young)
[14 Mar 2006] DSA-1000-2 libapreq2-perl - design error
	{CVE-2006-0042}
	[sarge] - libapreq2-perl 2.04-dev-1sarge2
[14 Mar 2006] DSA-999-1 lurker - several
	{CVE-2006-1062 CVE-2006-1063 CVE-2006-1064}
	[sarge] - lurker 1.2-5sarge1
	NOTE: not fixed in testing at the time of DSA (too young)
[14 Mar 2006] DSA-998-1 libextractor - several
	{CVE-2006-0301}
	[sarge] - libextractor 0.4.2-2sarge3
	NOTE: not fixed in testing at the time of DSA (missing mips builds)
[13 Mar 2006] DSA-997-1 bomberclone - buffer overflows
	{CVE-2006-0460}
	[sarge] - bomberclone 0.11.5-1sarge1
	NOTE: not fixed in testing at the time of DSA (missing builds)
[13 Mar 2006] DSA-996-1 libcrypt-cbc-perl - programming error
	{CVE-2006-0898}
	[sarge] - libcrypt-cbc-perl 2.12-1sarge1
	NOTE: fixed in testing at the time of DSA
[13 Mar 2006] DSA-995-1 metamail - buffer overflow
	{CVE-2006-0709}
	[woody] - metamail 2.7-45woody.4
	[sarge] - metamail 2.7-47sarge1
	NOTE: fixed in testing at the time of DSA
[13 Mar 2006] DSA-994-1 freeciv - denial of service
	{CVE-2006-0047}
	[sarge] - freeciv 2.0.1-1sarge1
	NOTE: fixed in testing at the time of DSA
[10 Mar 2006] DSA-993-2 gnupg - remote
	{CVE-2006-0049}
	[woody] - gnupg 1.0.6-4woody5
	[sarge] - gnupg 1.4.1-1.sarge3
	NOTE: not fixed in testing at the time of DSA (too young)
	NOTE: Initial -1 DSA lacked a Woody version
[10 Mar 2006] DSA-992-1 ffmpeg - buffer overflow
	{CVE-2005-4048}
	[sarge] - ffmpeg 0.cvs20050313-2sarge1
	NOTE: fixed in testing at the time of DSA
[10 Mar 2006] DSA-991-1 zoo - buffer overflow
	{CVE-2006-0855}
	[woody] - zoo 2.10-9woody0
	[sarge] - zoo 2.10-11sarge0
	NOTE: not fixed in testing at the time of DSA (too young)
[10 Mar 2006] DSA-990-1 bluez-hcidump - programming error
	{CVE-2006-0670}
	[sarge] - bluez-hcidump 1.17-1sarge1
	NOTE: fixed in testing at the time of DSA
[08 Mar 2006] DSA-989-1 zoph - SQL injection
	{CVE-2006-0402}
	[sarge] - zoph 0.3.3-12sarge1
	NOTE: not fixed in testing at the time of DSA (too young)
[08 Mar 2006] DSA-988-1 squirrelmail - several
	{CVE-2006-0377 CVE-2006-0195 CVE-2006-0188}
	[woody] - squirrelmail 1.2.6-5
	[sarge] - squirrelmail 2:1.4.4-8
	NOTE: not fixed in testing at the time of DSA (unfixed in sid)
[07 Mar 2006] DSA-987-1 tar - buffer overflow
	{CVE-2006-0300}
	[sarge] - tar 1.14-2.1
	NOTE: fixed in testing at the time of DSA
[06 Mar 2006] DSA-986-1 gnutls11 - buffer overflows
	{CVE-2006-0645}
	[sarge] - gnutls11 1.0.16-13.2
	NOTE: not fixed in testing at the time of DSA (unfixed in sid)
[06 Mar 2006] DSA-985-1 libtasn1-2 - buffer overflows
	{CVE-2006-0645}
	[sarge] - libtasn1-2 0.2.10-3sarge1
	NOTE: not fixed in testing at the time of DSA (unfixed in sid)
[02 Mar 2006] DSA-984-1 xpdf - several
	{CVE-2005-2097 CVE-2005-3191 CVE-2005-3193 CVE-2006-0301}
	[sarge] - xpdf 3.00-13.6
	NOTE: sid is not affected, just a revamp of previous patches
[27 Feb 2006] DSA-983-1 pdftohtml - several
	{CVE-2005-3191 CVE-2005-3192 CVE-2006-0301}
	[sarge] - pdftohtml 0.36-11sarge2
	NOTE: sid is not affected, just a revamp of previous patches
[27 Feb 2006] DSA-982-1 gpdf - several
	{CVE-2005-2097 CVE-2005-3191 CVE-2005-3193 CVE-2006-0301 CVE-2006-1244}
	[sarge] - gpdf 2.8.2-1.2sarge4
	NOTE: sid is not affected, just a revamp of previous patches
[26 Feb 2006] DSA-981-1 bmv - integer overflow
	{CVE-2005-3278}
	[woody] - bmv 1.2-14.3
	[sarge] - bmv 1.2-17sarge1
	NOTE: fixed in testing at the time of DSA
[22 Feb 2006] DSA-980-1 tutos - several
	{CVE-2004-2161 CVE-2004-2162}
	[sarge] - tutos 1.1.20031017-2+1sarge1
	NOTE: fixed in testing at the time of DSA (removed from sid)
[17 Feb 2006] DSA-979-1 pdfkit.framework - several
	{CVE-2005-3191 CVE-2005-3193 CVE-2006-0301}
	[sarge] - pdfkit.framework 0.8-2sarge3
	NOTE: sid is not affected
[17 Feb 2006] DSA-978-1 gnupg - invalid success return
	{CVE-2006-0455}
	[woody] - gnupg 1.0.6-4woody4
	[sarge] - gnupg 1.4.1-1sarge1
	NOTE: not fixed in sid at the time of DSA
[16 Feb 2006] DSA-977-1 heimdal - several
	{CVE-2006-0582 CVE-2006-0677}
	[woody] - heimdal <not-affected>
	[sarge] - heimdal 0.6.3-10sarge2
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[15 Feb 2006] DSA-976-1 libast - buffer overflow
	{CVE-2006-0224}
	[woody] - libast1 0.4-3woody2
	[sarge] - libast 0.6-0pre2003010606sarge1
	NOTE: Fixed in sid at time of DSA - need 10 days for migration
[15 Feb 2006] DSA-975-1 nfs-user-server - buffer overflow
        {CVE-2006-0043}
        [woody] - nfs-user-server 2.2beta47-12woody1
        [sarge] - nfs-user-server 2.2beta47-20sarge2
	NOTE: fixed in testing at time of DSA
[15 Feb 2006] DSA-974-1 gpdf - buffer overflow
        {CVE-2006-0301}
        [sarge] - gpdf 2.8.2-1.2sarge3
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[15 Feb 2006] DSA-973-1 otrs - several
        {CVE-2005-3893 CVE-2005-3894 CVE-2005-3895}
        [sarge] - otrs 1.3.2p01-6
	NOTE: fixed in testing at time of DSA
[15 Feb 2006] DSA-972-1 pdfkit.framework - buffer overflows
        {CVE-2006-0301}
        [sarge] - pdfkit.framework 0.8-2sarge2
	NOTE: not fixed in testing at time of DSA (too young)
[14 Feb 2006] DSA-971-1 xpdf - buffer overflow
        {CVE-2006-0301}
        [sarge] - xpdf 3.00-13.5
	NOTE: fixed in testing at time of DSA
[14 Feb 2006] DSA-970-1 kronolith - missing input sanitising
        {CVE-2005-4189}
        [sarge] - kronolith 1.1.4-2sarge1
	NOTE: fixed in testing at time of DSA (removed from sid)
[13 Feb 2006] DSA-969-1 scponly - design error
        {CVE-2005-4532 CVE-2005-4533}
        [sarge] - scponly 4.0-1sarge1
	NOTE: not fixed in testing at time of DSA (mips/mipsel missing)
[13 Feb 2006] DSA-968-1 noweb - insecure temporary file
        {CVE-2005-3342}
        [woody] - noweb 2.9a-7.4
        [sarge] - noweb 2.10c-3.2
	NOTE: not fixed in testing at time of DSA (too young)
[10 Feb 2006] DSA-967-1 elog - several
        {CVE-2005-4439 CVE-2006-0347 CVE-2006-0348 CVE-2006-0597 CVE-2006-0598 CVE-2006-0599 CVE-2006-0600}
        [sarge] - elog 2.5.7+r1558-4+sarge2
	NOTE: fixed in testing at time of DSA
[09 Feb 2006] DSA-966-1 adzapper - denial of service
        {CVE-2006-0046}
        [sarge] - adzapper 20050316-1sarge1
	NOTE: fixed in testing at time of DSA
[06 Feb 2006] DSA-965-1 ipsec-tools - null dereference
        {CVE-2005-3732}
        [sarge] - ipsec-tools 1:0.5.2-1sarge1
	NOTE: fixed in testing at time of DSA
[03 Feb 2006] DSA-964-1 gnocatan - buffer overflow
	{ CVE-2006-0467 }
	[woody] - gnocatan 0.6.1-5woody3
	[sarge] - gnocatan 0.8.1.59-1sarge1
	NOTE: not fixed in testing at time of DSA
	NOTE: Fixed in sid at time of DSA (package name change to pioneers)
[02 Feb 2006] DSA-963-1 mydns - missing input sanitising
	{ CVE-2006-0351 }
	[sarge] - mydns 1.0.0-4sarge1
	NOTE: not fixed in testing at time of DSA
	NOTE: fixed in sid at time of DSA
[01 Feb 2006] DSA-962-1 pdftohtml - buffer overflows
	{CVE-2005-3191 CVE-2005-3192 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[sarge] - pdftohtml 0.36-11sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[01 Feb 2006] DSA-961-1 pdfkit.framework - buffer overflows
	{CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[sarge] - pdfkit.framework 0.8-2sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[31 Jan 2006] DSA-960-3 libmail-audit-perl - insecure temporary file creation
	{CVE-2005-4536}
	[woody] - libmail-audit-perl 2.0-4woody3
	[sarge] - libmail-audit-perl 2.1-5sarge4
	NOTE: 960-1 and 960-2 had regressions
[30 Jan 2006] DSA-959-1 unalz - buffer overflow
        {CVE-2005-3862}
        [sarge] - unalz 0.30.1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[27 Jan 2006] DSA-958-1 drupal - several
        {CVE-2005-3973 CVE-2005-3974 CVE-2005-3975}
        [sarge] - drupal 4.5.3-5
	NOTE: fixed in testing at time of DSA 
[26 Jan 2006] DSA-957-2 imagemagick - missing shell meta sanitising
        {CVE-2005-4601}
        [woody] - imagemagick 4:5.4.4.5-1woody8
        [sarge] - imagemagick 6:6.0.6.2-2.6
	NOTE: fixed in testing at time of DSA 
[26 Jan 2006] DSA-956-1 lsh-server - filedescriptor leak
        {CVE-2006-0353}
        [sarge] - lsh-utils 2.0.1-3sarge1
	NOTE: not fixed in testing at time of DSA (not yet built)
[25 Jan 2006] DSA-955-1 mailman - DoS
	{CVE-2005-3573 CVE-2005-4153}
	[woody] - mailman <not-affected> (Vulnerable code not present)
	[sarge] - mailman 2.1.5-8sarge1
	NOTE: fixed in testing at time of DSA
[25 Jan 2006] DSA-954-1 wine - design flaw
	{CVE-2006-0106}
	[sarge] - wine 0.0.20050310-1.2
	NOTE: not fixed in testing at time of DSA (too young, 1/10)
[24 Jan 2006] DSA-953-1 flyspray - missing input sanitising
	{CVE-2005-3334}
	[sarge] - flyspray 0.9.7-2.1
	NOTE: fixed in testing at time of DSA
[23 Jan 2006] DSA-952-1 libapache-auth-ldap - format string vulnerability
	{CVE-2006-0150}
	[woody] - libapache-auth-ldap 1.6.0-3.1
	[sarge] - libapache-auth-ldap 1.6.0-8.1
	NOTE: fixed in testing at time of DSA (no longer present in testing/sid)
[23 Jan 2006] DSA-951-2 trac - missing input sanitising
	{CVE-2005-4065 CVE-2005-4644}
	[sarge] - trac 0.8.1-3sarge4
	NOTE: fixed in testing at time of DSA
	NOTE: Original fix in 951-1 had regressions
[23 Jan 2006] DSA-950-1 cupsys - buffer overflow
	{CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[woody] - cupsys 1.1.14-5woody14
	[sarge] - cupsys <not-affected> (Cups uses xpdf-utils in Sarge)
	NOTE: fixed in testing at time of DSA
[20 Jan 2006] DSA-949-1 crawl - insecure program execution
        {CVE-2006-0045}
	[woody] - crawl 1:4.0.0beta23-2woody2
	[sarge] - crawl 1:4.0.0beta26-4sarge0
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[20 Jan 2006] DSA-948-1 kdelibs - heap overflow
        {CVE-2006-0019}
	[sarge] - kdelibs 4:3.3.2-6.4
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[20 Jan 2006] DSA-947-1 clamav - heap overflow
        {CVE-2006-0162 CVE-2005-3587}
	[sarge] - clamav 0.84-2.sarge.7
	NOTE: fixed in testing at time of DSA
[08 Apr 2006] DSA-946-2 sudo - missing input sanitising
        {CVE-2005-4158 CVE-2006-0151}
	[woody] - sudo 1.6.6-1.6
	[sarge] - sudo 1.6.8p7-1.4
	NOTE: fixed in testing at time of DSA
	NOTE: The fix for stable and oldstable switched from a black list
	NOTE: of dangerous env vars to a white list of known-to-be-safe env vars
	NOTE: sid's 1.6.8p12 still has the black list (although with the strong
	NOTE: recommendation to use env_reset, which basically does the same),
	NOTE: but 1.7 will have a white list as well
[17 Jan 2006] DSA-945-1 antiword - insecure temporary file
        {CVE-2005-3126}
        [woody] - antiword 0.32-2woody0
	NOTE: fixed in testing at time of DSA
	NOTE: sarge is also affected, but the uploaded version is greater
	NOTE: than the fixed sid version.
[17 Jan 2006] DSA-944-1 mantis - several
	{CVE-2005-4238 CVE-2005-4518 CVE-2005-4519 CVE-2005-4520 CVE-2005-4521 CVE-2005-4522 CVE-2005-4523 CVE-2005-4524 CVE-2006-0840}
	[woody] - mantis <not-affected> (Vulnerable code not present)
	[sarge] - mantis 0.19.2-5sarge1
	NOTE: fixed in testing at time of DSA
[16 Jan 2006] DSA-943-1 perl - integer overflow
	{CVE-2005-3962}
	[woody] - perl <not-affected>
	[sarge] - perl 5.8.4-8sarge3
	NOTE: Fixed in testing at time of DSA
[16 Jan 2006] DSA-942-1 albatross - design error
	{CVE-2006-0044}
	[sarge] - albatross 1.20-2
	NOTE: Fixed in testing at time of DSA
[16 Jan 2006] DSA-941-1 tuxpaint - insecure temporary file
	{CVE-2005-3340}
	[sarge] - tuxpaint 1:0.9.14-2sarge0
	NOTE: Not fixed in testing at time of DSA (only 2/2 days old)
[13 Jan 2006] DSA-940-1 gpdf - buffer overflows
	{CVE-2005-3191 CVE-2005-3192 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[sarge] - gpdf 2.8.2-1.2sarge2
	NOTE: Not fixed in testing at time of DSA (waiting on dep)
[13 Jan 2006] DSA-939-1 fetchmail - programming error
	{CVE-2005-4348}
	[woody] - fetchmail <not-affected> (Vulnerable code not present)
	[sarge] - fetchmail 6.2.5-12sarge4
	NOTE: Not fixed in testing at time of DSA (unfixed in sid)
[12 Jan 2006] DSA-938-1 koffice - buffer overflows
	{CVE-2005-3191 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[sarge] - koffice 1:1.3.5-4.sarge.2
	NOTE: Not fixed in testing at time of DSA (too new)
[12 Jan 2006] DSA-937-1 tetex-bin - buffer overflows
	{CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[sarge] - tetex-bin 2.0.2-30sarge4
	[woody] - tetex-bin 1.0.7+20011202-7.7
	NOTE: Not fixed in testing at time of DSA (waiting on dep)
[11 Jan 2006] DSA-936-1 libextractor - buffer overflows
	{CVE-2005-2097 CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[sarge] - libextractor 0.4.2-2sarge2
	NOTE: Fixed in testing at time of DSA
[10 Jan 2006] DSA-935-1 libapache2-mod-auth-pgsql - format string vulnerability
	{CVE-2005-3656}
	[sarge] - libapache2-mod-auth-pgsql 2.0.2b1-5sarge0
	NOTE: Not fixed in sid at the time of DSA
[09 Jan 2006] DSA-934-1 pound - remote
	{CVE-2005-1391 CVE-2005-3751}
	[sarge] - pound 1.8.2-1sarge1
	NOTE: Fixed in testing at time of DSA
[09 Jan 2006] DSA-933-1 hylafax - arbitrary command execution
	{CVE-2005-3539}
	[woody] - hylafax 4.1.1-4woody1
	[sarge] - hylafax 1:4.2.1-5sarge3
	NOTE: Not fixed in testing at time of DSA (Valid candidate should sync today)
[09 Jan 2006] DSA-932-1 kdegraphics - buffer overflows
        {CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
        [sarge] - kdegraphics 4:3.3.2-2sarge3
[09 Jan 2006] DSA-931-1 xpdf - buffer overflows
        {CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628}
	[woody] - xpdf 1.00-3.8
	[sarge] - xpdf 3.00-13.4
[10 Jan 2006] DSA-930-2 smstools - format string attack
	{CVE-2006-0083}
	[woody] - smstools 1.5.0-2woody0
	[sarge] - smstools 1.14.8-1sarge0
	NOTE: not fixed in sid at time of DSA
[09 Jan 2006] DSA-930-1 smstools - format string error
        {CVE-2006-0083}
        [sarge] - smstools 1.14.8-1sarge0
[09 Jan 2006] DSA-929-1 petris - buffer overflow
        {CVE-2005-3540}
        [sarge] - petris 1.0.1-4sarge0
[27 Dec 2005] DSA-928-1 dhis-tools-dns - insecure temporary file
        {CVE-2005-3341}
        [sarge] - dhis-tools-dns 5.0-3sarge1
[27 Dec 2005] DSA-927-1 tkdiff - insecure temporary file
        {CVE-2005-3343}
        [woody] - tkdiff 1:3.08-3woody0
        [sarge] - tkdiff 1:4.0.2-1sarge0
	NOTE: fixed in testing at time of DSA 
[23 Dec 2005] DSA-926-1 ketm - buffer overflow
        {CVE-2005-3535}
        [woody] - ketm 0.0.6-7woody0
        [sarge] - ketm 0.0.6-17sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[22 Dec 2005] DSA-925-1 phpbb2 - several
	{CVE-2005-3310 CVE-2005-3415 CVE-2005-3416 CVE-2005-3417 CVE-2005-3418 CVE-2005-3419 CVE-2005-3420 CVE-2005-3536 CVE-2005-3537}
	[sarge] - phpbb2 2.0.13+1-6sarge2
	NOTE: fixed in testing at time of DSA
[21 Dec 2005] DSA-924-1 nbd - buffer overflow
	{CVE-2005-3534}
	[woody] - nbd 1.2cvs20020320-3.woody.3
	[sarge] - nbd 1:2.7.3-3sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[19 Dec 2005] DSA-923-1 dropbear - buffer overflow
	{CVE-2005-4178}
	[sarge] - dropbear 0.45-2sarge0
	NOTE: fixed in testing at time of DSA 
[14 Dec 2005] DSA-922-1 kernel-source-2.6.8 - several
	{CVE-2004-2302 CVE-2005-0756 CVE-2005-0757 CVE-2005-1265 CVE-2005-1761 CVE-2005-1762 CVE-2005-1763 CVE-2005-1765 CVE-2005-1767 CVE-2005-2456 CVE-2005-2458 CVE-2005-2459 CVE-2005-2548 CVE-2005-2801 CVE-2005-2872 CVE-2005-3105 CVE-2005-3106 CVE-2005-3107 CVE-2005-3108 CVE-2005-3109 CVE-2005-3110 CVE-2005-3271 CVE-2005-3272 CVE-2005-3273 CVE-2005-3274 CVE-2005-3275 CVE-2005-3276}
	[sarge] - kernel-source-2.6.8 2.6.8-16sarge1
        [sarge] - kernel-image-2.6.8-alpha 2.6.8-16sarge1
        [sarge] - kernel-image-2.6.8-amd64 2.6.8-16sarge1
        [sarge] - kernel-image-2.6.8-hppa 2.6.8-6sarge1
        [sarge] - kernel-image-2.6.8-i386 2.6.8-16sarge1
        [sarge] - kernel-image-2.6.8-ia64 2.6.8-14sarge1
        [sarge] - kernel-image-2.6.8-m68k 2.6.8-4sarge1
        [sarge] - kernel-patch-powerpc-2.6.8 2.6.8-12sarge1
        [sarge] - kernel-image-2.6.8-s390 2.6.8-5sarge1
        [sarge] - kernel-image-2.6.8-sparc 2.6.8-15sarge1
	NOTE: fixed in testing at time of DSA
[14 Dec 2005] DSA-921-1 kernel-source-2.4.27 - several
	{CVE-2005-0756 CVE-2005-0757 CVE-2005-1762 CVE-2005-1767 CVE-2005-1768 CVE-2005-2456 CVE-2005-2458 CVE-2005-2459 CVE-2005-2553 CVE-2005-2801 CVE-2005-2872 CVE-2005-3275}
	[sarge] - kernel-source-2.4.27 2.4.27-10sarge1
        [sarge] - kernel-image-2.4.27-alpha 2.4.27-10sarge1
        [sarge] - kernel-patch-2.4.27-arm 2.4.27-1sarge1
        [sarge] - kernel-image-2.4.27-arm 2.4.27-2sarge1
        [sarge] - kernel-image-2.4.27-i386 2.4.27-10sarge1
        [sarge] - kernel-image-2.4.27-ia64 2.4.27-10sarge1
        [sarge] - kernel-image-2.4.27-m68k 2.4.27-3sarge1
        [sarge] - kernel-patch-2.4.27-mips 2.4.27-10.sarge1.040815-1
        [sarge] - kernel-patch-powerpc-2.4.27 2.4.27-10sarge1
        [sarge] - kernel-image-2.4.27-s390 2.4.27-2sarge1
        [sarge] - kernel-image-2.4.27-sparc 2.4.27-9sarge1
	NOTE: fixed in testing at time of DSA
[13 Dec 2005] DSA-920-1 ethereal - buffer overflow
	{CVE-2005-3651}
	[woody] - ethereal 0.9.4-1woody14
	[sarge] - ethereal 0.10.10-2sarge3
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[12 Dec 2005] DSA-919-2 curl - buffer overflow
	{CVE-2005-4077 CVE-2005-3185}
	[woody] - curl 7.9.5-1woody2
	[sarge] - curl 7.13.2-2sarge5
	NOTE: partially fixed in testing at time of DSA 
	NOTE: Initial -1 DSA was incomplete
[09 Dec 2005] DSA-918-1 osh - programming error
	{CVE-2005-3346 CVE-2005-3533}
	[woody] - osh 1.7-11woody2
	[sarge] - osh 1.7-13sarge1
	NOTE: fixed in testing at time of DSA (has been removed)
[08 Dec 2005] DSA-917-1 courier - programming error
	{CVE-2005-3532}
	[woody] - courier 0.37.3-2.8
	[sarge] - courier 0.47-4sarge4
	NOTE: not fixed in testing at time of DSA (waiting on GCC)
[07 Dec 2005] DSA-916-1 inkscape - buffer overflow
	{CVE-2005-3737 CVE-2005-3885}
	[sarge] - inkscape 0.41-4.99.sarge2
	NOTE: not fixed in testing at time of DSA (RC bug, waiting on GCC)
[02 Dec 2005] DSA-915-1 helix-player - buffer overflow
	{CVE-2005-2629}
	[sarge] - helix-player 1.0.4-1sarge2
	NOTE: fixed in testing at time of DSA (not in testing due to RC bugs)
[01 Dec 2005] DSA-914-1 horde2 - missing input sanitising
	{CVE-2005-3570}
	[sarge] - horde2 2.2.8-1sarge1
	NOTE: fixed in testing at time of DSA
[01 Dec 2005] DSA-913-1 gdk-pixbuf - several
	{CVE-2005-2975 CVE-2005-2976 CVE-2005-3186}
	[woody] - gdk-pixbuf 0.17.0-2woody3
	[sarge] - gdk-pixbuf 0.22.0-8.1
	NOTE: fixed in testing at time of DSA
[30 Nov 2005] DSA-912-1 centericq - denial of service
	{CVE-2005-3694}
	[woody] - centericq 4.5.1-1.1woody1
	[sarge] - centericq 4.20.0-1sarge3
	NOTE: not fixed in testing at time of DSA (waiting on deps)
[30 Nov 2005] DSA-911-1 gtk+2.0 - several
	{CVE-2005-2975 CVE-2005-2976 CVE-2005-3186}
	[woody] - gtk+2.0 2.0.2-5woody3
	[sarge] - gtk+2.0 2.6.4-3.1
	NOTE: not fixed in testing at time of DSA (RC bug)
[24 Nov 2005] DSA-910-1 zope2.7 - design error
	{CVE-2005-3323}
	[sarge] - zope2.7 2.7.5-2sarge1
	NOTE: fixed in testing at time of DSA
[23 Nov 2005] DSA-909-1 horde3 - missing input sanitising
	{CVE-2005-3759}
	[sarge] - horde3 3.0.4-4sarge2
	NOTE: not fixed in testing at time of DSA (too young 0/2)
[23 Nov 2005] DSA-908-1 sylpheed-claws - buffer overflows
	{CVE-2005-3354}
	[woody] - sylpheed-claws 0.7.4claws-3woody1
	[sarge] - sylpheed-claws 1.0.4-1sarge1
	NOTE: not fixed in testing at time of DSA (too young 0/2)
[23 Nov 2005] DSA-907-1 ipmenu - insecure temporary file
	{CVE-2004-2569}
	[woody] - ipmenu 0.0.3-4woody1
	NOTE: fixed in testing at time of DSA (not part of testing/sarge due to long-standing blocking deps)
[22 Nov 2005] DSA-906-1 sylpheed - several
	{CVE-2005-3354}
	[woody] - sylpheed 0.7.4-4woody1
	[sarge] - sylpheed 1.0.4-1sarge1
	NOTE: not fixed in testing at time of DSA (too young 7/10, RC bugs)
[22 Nov 2005] DSA-905-1 mantis - several
	{CVE-2005-3091 CVE-2005-3335 CVE-2005-3336 CVE-2005-3338 CVE-2005-3339}
	[woody] - mantis <not-affected> (Vulnerable code not present)
	[sarge] - mantis 0.19.2-4.1
	NOTE: fixed in testing at time of DSA
[21 Nov 2005] DSA-904-1 netpbm-free - buffer overflows
	{CVE-2005-3632 CVE-2005-3662}
	[woody] - netpbm-free 2:9.20-8.5
	[sarge] - netpbm-free 2:10.0-8sarge2
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[21 Nov 2005] DSA-903-1 unzip - race condition
	{CVE-2005-2475}
	[woody] - unzip 5.50-1woody5
	[sarge] - unzip 5.52-1sarge3
	NOTE: fixed in testing at time of DSA
	NOTE: Original 903-1 DSA had a regression
[21 Nov 2005] DSA-902-1 xmail - buffer overflow
	{CVE-2005-2943}
	[sarge] - xmail 1.21-3sarge1
	NOTE: fixed in testing at time of DSA
[19 Nov 2005] DSA-901-1 gnump3d - programming error
	{CVE-2005-3349 CVE-2005-3355}
	[sarge] - gnump3d 2.9.3-1sarge3
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[22 Nov 2005] DSA-900-3 fetchmail - programming error
	{CVE-2005-3088}
	[woody] - fetchmail 5.9.11-6.4
	[woody] - fetchmail-ssl 5.9.11-6.3
	[sarge] - fetchmail 6.2.5-12sarge3
	NOTE: Original two Woody fixes had regressions
	NOTE: not fixed in testing at time of DSA (too young 2/2)
[17 Nov 2005] DSA-899-1 egroupware - programming errors
	{CVE-2005-0870 CVE-2005-2600 CVE-2005-3347 CVE-2005-3348}
	[sarge] - egroupware 1.0.0.007-2.dfsg-2sarge4
	NOTE: not fixed in testing at time of DSA (too young 1/2)
[17 Nov 2005] DSA-898-1 phpgroupware - programming errors
	{CVE-2005-0870 CVE-2005-3347 CVE-2005-3348}
	[woody] - phpgroupware 0.9.14-0.RC3.2.woody5 
	[sarge] - phpgroupware 0.9.16.005-3.sarge4
	NOTE: not fixed in testing at time of DSA (too young 1/2)
[15 Nov 2005] DSA-897-1 phpsysinfo - programming errors
	{CVE-2005-0870 CVE-2005-3347 CVE-2005-3348}
	[woody] - phpsysinfo 2.0-3woody3
	[sarge] - phpsysinfo 2.3-4sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[15 Nov 2005] DSA-896-1 linux-ftpd-ssl - buffer overflow
	{CVE-2005-3524}
	[sarge] - linux-ftpd-ssl 0.17.18+0.3-3sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[14 Nov 2005] DSA-895-1 uim - programming error
	{CVE-2005-3149}
	[sarge] - uim 1:0.4.6final1-3sarge1
	NOTE: not fixed in testing at time of DSA (missing deps)
[14 Nov 2005] DSA-894-1 abiword - buffer overflows
	{CVE-2005-2964 CVE-2005-2972}
	[woody] - abiword 1.0.2+cvs.2002.06.05-1woody3
	[sarge] - abiword 2.2.7-3sarge2
	NOTE: sid fix from DSA text in wrong, pinged security@
	NOTE: fixed in testing at time of DSA
[14 Nov 2005] DSA-893-1 acidlab - missing input sanitising
	{CVE-2005-3325}
	[woody] - acidlab 0.9.6b20-2.1
	[sarge] - acidlab 0.9.6b20-10.1
	NOTE: fixed in testing at time of DSA
[10 Nov 2005] DSA-892-1 awstats - missing input sanitising
	{CVE-2005-1527}
	[sarge] - awstats 6.4-1sarge1 (bug #322591; bug #334833; bug #336137; medium)
	[woody] - awstats <not-affected> (vulnerable code not present)
	NOTE: fixed in testing at time of DSA
[09 Nov 2005] DSA-891-1 gpsdrive - format string
	{CVE-2005-3523}
	[sarge] - gpsdrive 2.09-2sarge1
	NOTE: not fixed in testing at time of DSA (DSA fix propagated to sid)
[09 Nov 2005] DSA-890-1 libungif4 - several
	{CVE-2005-2974 CVE-2005-3350}
	[woody] - libungif4 4.1.0b1-2woody1
	[sarge] - libungif4 4.1.3-2sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[08 Nov 2005] DSA-889-1 enigmail - programming error
	{CVE-2005-3256}
	[sarge] - enigmail 2:0.91-4sarge2
	NOTE: fixed in testing at time of DSA
[07 Nov 2005] DSA-888-1 openssl - cryptographic weakness
	{CVE-2005-2969}
	[woody] - openssl 0.9.6c-2.woody.8
	[sarge] - openssl 0.9.7e-3sarge1
	NOTE: fixed in testing at time of DSA
[07 Nov 2005] DSA-887-1 clamav - several
	{CVE-2005-3239 CVE-2005-3303 CVE-2005-3500 CVE-2005-3501}
	[sarge] - clamav 0.84-2.sarge.6
	NOTE: fixed in testing at time of DSA (unfixed in sid; DTSA issued)
[07 Nov 2005] DSA-886-1 chmlib - several
	{CVE-2005-2659 CVE-2005-2930 CVE-2005-3318}
	[sarge] - chmlib 0.35-6sarge1
	NOTE: not fixed in testing at time of DSA (not built on all archs)
[07 Nov 2005] DSA-885-1 openvpn - several
	{CVE-2005-3393 CVE-2005-3409}
	[sarge] - openvpn 2.0-1sarge2
	NOTE: not fixed in testing at time of DSA (too young 0/2 days)
[07 Nov 2005] DSA-884-1 horde3 - design error
	{CVE-2005-3344}
	[sarge] - horde3 3.0.4-4sarge1
	NOTE: fixed in testing at time of DSA
[04 Nov 2005] DSA-883-1 thttpd - insecure temporary file
	{CVE-2005-3124}
	[woody] - thttpd 2.21b-11.3
	[sarge] - thttpd 2.23beta1-3sarge1
	NOTE: fixed in testing at time of DSA (not present in testing/sid anymore)
[04 Nov 2005] DSA-882-1 openssl095 - cryptographic weakness
	{CVE-2005-2969}
	[woody] - openssl095 0.9.5a-6.woody.6
	NOTE: fixed in testing at time of DSA (not present in testing/sid anymore)
[04 Nov 2005] DSA-881-1 openssl096 - cryptographic weakness
	{CVE-2005-2969}
	[sarge] - openssl096 0.9.6m-1sarge1
	NOTE: fixed in testing at time of DSA (not present in testing/sid anymore)
[02 Nov 2005] DSA-880-1 phpmyadmin - several
	{CVE-2005-2869 CVE-2005-3300 CVE-2005-3301 CVE-2005-3787}
	[woody] - phpmyadmin <unfixed>
	[sarge] - phpmyadmin 4:2.6.2-3sarge1
	NOTE: fixed in testing at time of DSA
[02 Nov 2005] DSA-879-1 gallery - programming error
	{CVE-2005-2596}
	[woody] - gallery <not-affected> (Not affected, according to DSA-879)
	[sarge] - gallery 1.5-1sarge1
	NOTE: fixed in testing at time of DSA
[28 Oct 2005] DSA-878-1 netpbm-free - buffer overflow
	{CVE-2005-2978}
	[woody] - netpbm-free <not-affected> (Does not contain the vulnerable code)
	[sarge] - netpbm-free 2:10.0-8sarge1
	NOTE: not fixed in testing at time of DSA (png transition)
[28 Oct 2005] DSA-877-1 gnump3d - cross-site-scripting, directory traversal
	{CVE-2005-3123 CVE-2005-3424 CVE-2005-3425}
	[sarge] - gnump3d 2.9.3-1sarge2
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[27 Oct 2005] DSA-876-1 lynx-ssl - buffer overflow
	{CVE-2005-3120}
	[woody] - lynx 2.8.4.1b-3.2 
	[sarge] - lynx 2.8.5-2sarge1
	NOTE: not fixed in testing at time of DSA (lynx provides now TLS support; unfixed in sid)
[27 Oct 2005] DSA-875-1 openssl094 - cryptographic weakness
	{CVE-2005-2969}
	[woody] - openssl094 0.9.4-6.woody.4
	NOTE: fixed in testing at time of DSA (not present in testing/sid anymore)
[27 Oct 2005] DSA-874-1 lynx - buffer overflow
	{CVE-2005-3120}
	[woody] - lynx 2.8.4.1b-3.3 
	[sarge] - lynx 2.8.5-2sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[26 Oct 2005] DSA-873-1 net-snmp - programming error
	{CVE-2005-2177}
        [sarge] - net-snmp 5.1.2-6.2
	NOTE: not fixed in testing at time of DSA (libsnmp transition)
[26 Oct 2005] DSA-872-1 koffice - buffer overflow
	{CVE-2005-2971}
        [sarge] - koffice 1:1.3.5-4.sarge.1
	NOTE: not fixed in testing at time of DSA (KDE transition)
[25 Oct 2005] DSA-871-1 libgda2 - format string
	{CVE-2005-2958}
        [woody] - libgda <not-affected> (Does not contain the vulnerable code)
        [sarge] - libgda2 1.2.1-2sarge1
	NOTE: not fixed in testing at time of DSA (waiting on deps)
[25 Oct 2005] DSA-870-1 sudo - missing input sanitising
	{CVE-2005-2959}
        [woody] - sudo 1.6.6-1.4
        [sarge] - sudo 1.6.8p7-1.2
	NOTE: fixed in testing at time of DSA
[20 Oct 2005] DSA-869-1 eric - missing input sanitising
	{CVE-2005-3068}
        [sarge] - eric 3.6.2-2
	NOTE: not fixed in testing at time of DSA (KDE/qt transition)
[20 Oct 2005] DSA-868-1 mozilla-thunderbird - several
	{CVE-2005-2871 CVE-2005-2701 CVE-2005-2702 CVE-2005-2703 CVE-2005-2704 CVE-2005-2705 CVE-2005-2706 CVE-2005-2707 CVE-2005-2968}
        [sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.7
	NOTE: not fixed in testing at time of DSA (missing builds)
[20 Oct 2005] DSA-867-1 module-assistant - insecure temporary file
	{CVE-2005-3121}
        [sarge] - module-assistant 0.9sarge1
	NOTE: fixed in testing at time of DSA
[20 Oct 2005] DSA-866-1 mozilla - several
	{CVE-2005-2871 CVE-2005-2701 CVE-2005-2702 CVE-2005-2703 CVE-2005-2704 CVE-2005-2705 CVE-2005-2706 CVE-2005-2707}
        [woody] - mozilla <unfixed>
        [sarge] - mozilla 1:1.7.8-1sarge3
	NOTE: not fixed in testing at time of DSA (missing hppa, RC bugs)
	NOTE: DSA claims to fix CVE-2005-2968 and contains a patch.  But
	NOTE: mozilla-browser 1.7.8-1sarge2 does not contain the 
	NOTE: wrapper script in a vulnerable version.
[13 Oct 2005] DSA-865-1 hylafax - insecure temporary files
	{CVE-2005-3069}
	[woody] - hylafax 1:4.1.1-3.2
	[sarge] - hylafax 1:4.2.1-5sarge1
	NOTE: not fixed in testing at time of DSA (missing arm)
[13 Oct 2005] DSA-864-1 ruby1.8 - programming error
	{CVE-2005-2337}
	[sarge] - ruby1.8 1.8.2-7sarge2
	NOTE: not fixed in testing at time of DSA (RC bugs)
[12 Oct 2005] DSA-863-1 xine-lib - format string vulnerability
	{CVE-2005-2967}
	[woody] - xine-lib 0.9.8-2woody4
	[sarge] - xine-lib 1.0.1-1sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[11 Oct 2005] DSA-862-1 ruby1.6 - programming error
	{CVE-2005-2337}
	[sarge] - ruby1.6 1.6.8-12sarge1
	NOTE: not fixed in testing at time of DSA (RC bugs)
[11 Oct 2005] DSA-861-1 up-imap - buffer overflow
	{CVE-2005-2933}
	[sarge] - uw-imap 7:2002edebian1-11sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[11 Oct 2005] DSA-860-1 ruby - programming error
	{CVE-2005-2337}
	[woody] - ruby 1.6.7-3woody5
	NOTE: fixed in testing at time of DSA (woody-only DSA)
[10 Oct 2005] DSA-859-1 xli - buffer overflows
	{CVE-2005-3178}
	[woody] - xli 1.17.0-11woody2
	[sarge] - xli 1.17.0-18sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
[10 Oct 2005] DSA-858-1 xloadimage - buffer overflows
	{CVE-2005-3178}
	[woody] - xloadimage 4.1-10woody2 (bug #332524; medium)
	[sarge] - xloadimage 4.1-14.3
	NOTE: not fixed in testing at time of DSA (too young)
[10 Oct 2005] DSA-857-1 graphviz - insecure temporary file
	{CVE-2005-4803}
	[sarge] - graphviz 2.2.1-1sarge1 (low) 
	NOTE: fixed in testing at time of DSA
[10 Oct 2005] DSA-856-1 py2play - design error
	{CVE-2005-2875}
	[sarge] - py2play 0.1.7-1sarge1 (bug #326976; medium)
	NOTE: fixed in testing at time of DSA
[10 Oct 2005] DSA-855-1 weex - format string vulnerability
	{CVE-2005-3150}
	[sarge] - weex 2.6.1-6sarge1 (bug #332424; medium)
	[woody] - weex 2.6.1-4woody2 (bug #332424; medium)
	NOTE: not fixed in testing at time of DSA (DSA fix propagated to sid)
[09 Oct 2005] DSA-854-1 tcpdump - infinite loop
	{CVE-2005-1267}
	[sarge] - tcpdump 3.8.3-5sarge1
	[woody] - tcpdump <not-affected> (not affected according to DSA)
	NOTE: fixed in testing at time of DSA
[09 Oct 2005] DSA-853-1 ethereal - several
	{CVE-2005-2360 CVE-2005-2361 CVE-2005-2363 CVE-2005-2364 CVE-2005-2365 CVE-2005-2366 CVE-2005-2367}
	[woody] - ethereal 0.9.4-1woody13
	[sarge] - ethereal 0.10.10-2sarge3
	NOTE: not fixed in testing at time of DSA (not fixed in unstable)
[08 Oct 2005] DSA-852-1 up-imapproxy - arbitrary code execution
	{CVE-2005-2661}
	[sarge] - up-imapproxy 1.2.3-1sarge1
	NOTE: not fixed in testing at time of DSA (not fixed in unstable)
[08 Oct 2005] DSA-851-1 openvpn - denial of service
	{CVE-2005-2531 CVE-2005-2532 CVE-2005-2533 CVE-2005-2534}
	[sarge] - openvpn 2.0-1sarge1
	NOTE: fixed in testing at time of DSA
[08 Oct 2005] DSA-850-1 tcpdump - denial of service
	{CVE-2005-1279}
	[woody] - tcpdump 3.6.2-2.9
	NOTE: fixed in testing at time of DSA (woody-only DSA)
[08 Oct 2005] DSA-849-1 shorewall - programming error
	{CVE-2005-2317}
	[woody] - shorewall <not-affected> (vulnerable code not yet present)
	[sarge] - shorewall 2.2.3-2
	NOTE: fixed in testing at time of DSA
[08 Oct 2005] DSA-848-1 masqmail - several
	{CVE-2005-2662 CVE-2005-2663}
	[woody] - masqmail 0.1.16-2.2
	[sarge] - masqmail 0.2.20-1sarge1
	NOTE: not fixed in testing at time of DSA (not fixed in unstable)
[08 Oct 2005] DSA-847-1 dia - missing input sanitising
	{CVE-2005-2966}
	[sarge] - dia 0.94.0-7sarge1 (bug #330890; medium)
	[woody] - dia <not-affected> (not affected according to DSA)
	NOTE: not fixed in testing at time of DSA, missing sparc build, gcc-4.0
[07 Oct 2005] DSA-846-1 cpio - several
	{CVE-2005-1111 CVE-2005-1229}
	[woody] - cpio 2.4.2-39woody2
	[sarge] - cpio 2.5-1.3
	NOTE: fixed in testing at time of DSA
[06 Oct 2005] DSA-845-1 mason - programming error
	{CVE-2005-3118}
	[woody] - mason 0.13.0.92-2woody1
	[sarge] - mason 1.0.0-2.2
	NOTE: fixed in testing at time of DSA
[05 Oct 2005] DSA-844-1 mod-auth-shadow - programming error
	{CVE-2005-2963}
	[woody] - mod-auth-shadow 1.3-3.1woody.2
	[sarge] - mod-auth-shadow 1.4-1sarge1
	NOTE: not fixed in testing at time of DSA (missing m68k)
[05 Oct 2005] DSA-843-1 arc - insecure temporary file
	{CVE-2005-2945 CVE-2005-2992}
	[sarge] - arc 5.21l-1sarge1
	NOTE: fixed in testing at time of DSA
[04 Oct 2005] DSA-842-1 egroupware - missing input sanitising
	{CVE-2005-2498}
	[sarge] - egroupware 1.0.0.007-2.dfsg-2sarge2
	NOTE: fixed in testing at time of DSA
[04 Oct 2005] DSA-841-1 mailutils - format string vulnerability
        {CVE-2005-2878}
	[woody] - mailutils <not-affected> (not affected according to DSA)
        [sarge] - mailutils 1:0.6.1-4sarge1
	NOTE: not fixed in testing at time of DSA (missing arm)
[04 Jul 2005] DSA-840-1 drupal - missing input sanitising
	{CVE-2005-2498}
	[sarge] - drupal 4.5.3-4
	NOTE: fixed in testing at time of DSA
[04 Oct 2005] DSA-839-1 apachetop - insecure temporary file
	{CVE-2005-2660}
	[sarge] - apachetop 0.12.5-1sarge1
	NOTE: not fixed in testing at time of DSA (not built on m68k, waiting on gcc-4)
[03 Oct 2005] DSA-838-1 mozilla-firefox - multiple vulnerabilities
	{CVE-2005-2701 CVE-2005-2702 CVE-2005-2703 CVE-2005-2704 CVE-2005-2705 CVE-2005-2706 CVE-2005-2707}
	[sarge] - mozilla-firefox 1.0.4-2sarge5
	NOTE: not fixed in testing at time of DSA (not built on arm, silly RC bugs)
[02 Oct 2005] DSA-837-1 mozilla-firefox - buffer overflow
	{CVE-2005-2871}
	[sarge] - mozilla-firefox 1.0.4-2sarge4 (medium; bug #327452)
	NOTE: not fixed in testing at time of DSA (not built on arm, silly RC bugs)
[01 Oct 2005] DSA-836-1 cfengine2 - insecure temporary files
	{CVE-2005-2960 CVE-2005-3137}
	[sarge] - cfengine2 2.1.14-1sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
	NOTE: No bug exists for this issue
[01 Oct 2005] DSA-835-1 cfengine - insecure temporary files
	{CVE-2005-2960 CVE-2005-3137}
	[woody] - cfengine 1.6.3-9woody1
	[sarge] - cfengine 1.6.5-1sarge1
	NOTE: not fixed in testing at time of DSA (unfixed in sid)
	NOTE: No bug exists for this issue
[01 Oct 2005] DSA-834-1 prozilla - buffer overflow
	{CVE-2005-2961}
	[woody] - prozilla 1:1.3.6-3woody3
	NOTE: Prozilla has been removed before Sarge release
[30 Sep 2005] DSA-832-1 gopher - buffer overflows
	{CVE-2005-2772}
	[woody] - gopher 3.0.3woody4
	[sarge] - gopher 3.0.7sarge2
	NOTE: fixed in testing at time of DSA
[30 Sep 2005] DSA-831-1 mysql-dfsg-4.1 - several
	{CVE-2005-2558}
	[sarge] - mysql-dfsg-4.1 4.1.11a-4sarge2
	NOTE: not fixed in testing at time of DSA (waiting on gmp, missing builds)
[30 Sep 2005] DSA-830-1 ntlmaps - wrong permissions
	{CVE-2005-2962}
	[sarge] - ntlmaps 0.9.9-2sarge1
	NOTE: fixed in testing at time of DSA
[30 Sep 2005] DSA-829-1 mysql - several
	{CVE-2005-2558}
	[woody] - mysql 3.23.49-8.14
	NOTE: fixed in testing at time of DSA
[30 Sep 2005] DSA-828-1 squid - several
	{CVE-2005-2917}
	[woody] - squid <not-affected> (not affected according to DSA)
	[sarge] - squid 2.5.9-10sarge2
	NOTE: fixed in testing at time of DSA
[07 Nov 2005] DSA-809-3 squid - assertion error
	{CVE-2005-2794}
	[woody] - squid 2.4.6-2woody11
	[sarge] - squid 2.5.9-10sarge1
	NOTE: fixed in testing at time of DSA
	NOTE: -1 and -2 had regressions
[29 Sep 2005] DSA-827-1 backupninja - insecure temporary file creation
	{CVE-2005-3111}
	[sarge] - backupninja 0.5-3sarge1 (medium)	
	NOTE: not fixed in testing at time of DSA (too young 1/2 days)
[29 Sep 2005] DSA-826-1 helix-player - multiple
	{CVE-2005-1766 CVE-2005-2710}
	[sarge] - helix-player 1.0.4-1sarge1 (high)
	NOTE: not fixed in testing at time of DSA
[29 Sep 2005] DSA-825-1 loop-aes-utils - privilege escalation
	{CVE-2005-2876}
	[sarge] - loop-aes-utils 2.12p-4sarge1 (medium)
	NOTE: fixed in testing at the time of the DSA
[29 Sep 2005] DSA-823-1 util-linux - privilege escalation
	{CVE-2005-2876}
	[woody] - util-linux 2.11n-7woody1 (high)
	[sarge] - util-linux 2.12p-4sarge1 (high)
	NOTE: not fixed in testing at time of DSA
[29 Sep 2005] DSA-822-1 gtkdiskfree - insecure temporary file creation
	{CVE-2005-2918}
	[sarge] - gtkdiskfree 1.9.3-4sarge1 (bug #328566; medium)
	NOTE: not fixed even in unstable at time of DSA
[29 Sep 2005] DSA-824-1 clamav - infinite loop, buffer overflow
	{CVE-2005-2919 CVE-2005-2920}
	[sarge] - clamav 0.84-2.sarge.4 (high)
	NOTE: not fixed in testing at time of DSA
[28 Sep 2005] DSA-797-2 zsync - buffer overflow
	{CVE-2005-1849 CVE-2005-2096}
	NOTE: An upload to fix a build failure on i386
[28 Sep 2005] DSA-821-1 python2.3 - integer overflow
	{CVE-2005-2491}
	[sarge] - python2.3 2.3.5-3sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on gmp)
	NOTE: python2.3 is not in woody
[24 Sep 2005] DSA-820-1 courier - missing input sanitising
	{CVE-2005-2820 CVE-2005-2769}
	[woody] - courier 0.37.3-2.7 (medium)
	[sarge] - courier 0.47-4sarge3 (medium)
	NOTE: fixed in testing at time of DSA
	NOTE: CVE-2005-2769 listed as fixed in the changelog, missing from
	NOTE: DSA.
[23 Sep 2005] DSA-819-1 python2.1 - integer overflow
	{CVE-2005-2491}
	[woody] - python2.1 2.1.3-3.4 (medium)
	[sarge] - python2.1 2.1.3dfsg-1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on gmp)
[22 Sep 2005] DSA-818-1 kdeedu - insecure temporary files
	{CVE-2005-2101}
	[sarge] - kdeedu 4:3.3.2-3.sarge.1 (low)
	NOTE: not fixed in testing at time of DSA
	NOTE: woody is not affected according to the DSA
[22 Sep 2005] DSA-817-1 python2.2 - integer overflow
	{CVE-2005-2491}
	[woody] - python2.2 2.2.1-4.8 (bug #324531; medium) 
	[sarge] - python2.2 2.2.3dfsg-2sarge1 (bug #324531; medium)
	NOTE: not fixed in testing at time of DSA (waiting on gmp)
[19 Sep 2005] DSA-816-1 xfree86 - integer overflow
	{ VU#102441 }
	{CVE-2005-2495}
	[woody] - xfree86 4.1.0-16woody7
	[sarge] - xfree86 4.3.0.dfsg.1-14sarge1
	NOTE: not fixed in testing at time of DSA (waiting on gcc, which is waiting on gmp)
[16 Sep 2005] DSA-815-1 kdebase - programming error
	{CVE-2005-2494}
	[sarge] - kdebase 4:3.3.2-1sarge1 (bug #327039; medium)
	[woody] - kdebase <not-affected> (according to the DSA)
	NOTE: not fixed in testing at time of DSA (not even fixed in unstable)
[15 Sep 2005] DSA-814-1 lm-sensors - insecure temporary file
	{CVE-2005-2672}
	[sarge] - lm-sensors 1:2.9.1-1sarge2 (bug #324193)
	[woody] - lm-sensors <not-affected> (according to DSA)
	NOTE: not fixed in testing at time of DSA (waiting on rrdtool, which is waiting on perl)
[15 Sep 2005] DSA-813-1 centericq - several
	{CVE-2005-2369 CVE-2005-2370 CVE-2005-2448}
	[woody] - centericq <not-affected> (according to DSA)
	[sarge] - centericq 4.20.0-1sarge2
	NOTE: fixed in testing in time of DSA
[15 Sep 2005] DSA-812-1 turqstat - buffer overflow
	{CVE-2005-2658}
	[woody] - turqstat 2.2.1woody1 (medium)
	[sarge] - turqstat 2.2.2sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on qt, borked on m68k)
[21 Nov 2005] DSA-811-2 common-lisp-controller - design error
	{CVE-2005-2657}
	[woody] - common-lisp-controller <not-affected> (according to the DSA)
	[sarge] - common-lisp-controller 4.15sarge3 (bug #328633; medium)
	NOTE: Original sarge2 fix had regressions
	NOTE: fixed in testing at time of DSA
[13 Sep 2005] DSA-810-1 mozilla - several
	{CVE-2004-0718 CVE-2005-1937 CVE-2005-2260 CVE-2005-2261 CVE-2005-2263 CVE-2005-2265 CVE-2005-2266 CVE-2005-2268 CVE-2005-2269 CVE-2005-2270}
	[sarge] - mozilla 2:1.7.8-1sarge2 (medium)
	NOTE: not fixed in testing at time of DSA (buggy and TBS)
[13 Sep 2005] DSA-809-1 squid - several
	{CVE-2005-2794 CVE-2005-2796}
	[sarge] - squid 2.5.9-10sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (too young)
[12 Sep 2005] DSA-808-1 tdiary - design error
	{CVE-2005-2411}
	[sarge] - tdiary 2.0.1-1sarge1 (medium)
	NOTE: fixed in testing at time of DSA
[12 Sep 2005] DSA-807-1 libapache-mod-ssl - acl restriction bypass
	{CVE-2005-2700}
	[woody] - libapache-mod-ssl 2.8.9-2.5 (medium)
	[sarge] - libapache-mod-ssl 2.8.22-1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (too young)
[09 Sep 2005] DSA-806-1 gcvs - insecure temporary files
	{CVE-2005-2693}
	[woody] - gcvs 1.0a7-2woody1 (low)
	[sarge] - gcvs 1.0final-5sarge1 (low)
	NOTE: fixed in testing at time of DSA
[08 Sep 2005] DSA-805-1 apache2 - several
	{CVE-2005-1268 CVE-2005-2088 CVE-2005-2700 CVE-2005-2728}
	[sarge] - apache2 2.0.54-5 (medium)
	NOTE: not fixed in testing at time of DSA (too young)
[08 Sep 2005] DSA-804-2 kdelibs - insecure permissions
	{CVE-2005-1920}
	[sarge] - kdelibs 4:3.3.2-6.3 (medium)
	NOTE: fixed in testing at time of DSA
	NOTE: original fix from -1 was only included, not applied
[07 Sep 2005] DSA-803-1 apache - programming error
	{CVE-2005-2088}
	[woody] - apache 1.3.26-0woody7 (medium)
	[sarge] - apache 1.3.33-6sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (too young)
[07 Sep 2005] DSA-802-1 cvs - insecure temporary files
	{CVE-2005-2693}
	[woody] - cvs 1.11.1p1debian-13 (low)
	NOTE: not exposed in sarge according to the DSA
	NOTE: fixed in testing at time of DSA
[05 Sep 2005] DSA-801-1 ntp - programming error
	{CVE-2005-2496}
	[sarge] - ntp 1:4.2.0a+stable-2sarge1 (medium)
	[woody] - ntp <not-affected> (not affected according to DSA)
	NOTE: not fixed in testing at time of DSA (RC bugs)
[02 Sep 2005] DSA-800-1 pcre3 - integer overflow
	{CVE-2005-2491}
	[woody] - pcre3 3.4-1.1woody1
	[sarge] - pcre3 4.5-1.2sarge1
	NOTE: not fixed in testing at time of DSA (glibc transition)
	NOTE: however, fixed in secure-testing archive
[02 Sep 2005] DSA-799-1 webcalendar - input validation
	{CVE-2005-2717}
	[sarge] - webcalendar 0.9.45-4sarge2 (bug #326223; high)
	NOTE: not fixed in testing at time of DSA (coordinated disclosure)
[02 Sep 2005] DSA-798-1 phpgroupware - several
	{CVE-2005-2498 CVE-2005-2600 CVE-2005-2761}
	[woody] - phpgroupware <not-affected> (according to the DSA)
	[sarge] - phpgroupware 0.9.16.005-3.sarge2 (high)
	NOTE: not fixed in testing at time of DSA (too young)
[01 Sep 2005] DSA-797-1 zsync - buffer overflow
	{CVE-2005-1849 CVE-2005-2096}
	[sarge] - zsync 0.3.3-1.sarge.1 (medium) 
	NOTE: fixed in testing at time of DSA
[01 Sep 2005] DSA-796-1 affix - unsafe use of popen
	{CVE-2005-2716}
	[sarge] - affix 2.1.1-3 (medium) 
	NOTE: not fixed in testing at time of DSA (glibc transition, builds)
[01 Sep 2005] DSA-795-2 proftpd - format string error
	{CVE-2005-2390}
	[woody] - proftpd <not-affected> (not affected according to the DSA)
	[sarge] - proftpd 1.2.10-15sarge1 (medium)
	NOTE: fixed in testing at time of DSA
	NOTE: Initial -1 release had a build problem
[01 Sep 2005] DSA-794-1 polygen - programming error
	{CVE-2005-2656}
	[sarge] - polygen 1.0.6-7sarge1 (low)
	NOTE: not fixed in testing at time of DSA (too young)
[21 Aug 2005] DSA-779-2 mozilla-firefox - several
	NOTE: Essentially 1.0.6 with rolled-back version number, backported version had regressions
	{CVE-2005-2260 CVE-2005-2261 CVE-2005-2262 CVE-2005-2263 CVE-2005-2264 CVE-2005-2265 CVE-2005-2266 CVE-2005-2267 CVE-2005-2268 CVE-2005-2269 CVE-2005-2270}
	[sarge] - mozilla-firefox 1.0.4-2sarge3 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies)
	NOTE: Fixed in DTSA, which will have the same regressions, should be checked/reverted
[01 Sep 2005] DSA-793-1 courier - missing input sanitising
	{CVE-2005-2724}
	[woody] - courier 0.37.3-2.6 (medium)
	[sarge] - courier 0.47-4sarge2 (medium)
	NOTE: not fixed in testing at time of DSA (glibc transition, too young)
[31 Aug 2005] DSA-792-1 pstotext - missing input sanitising
	{CVE-2005-2536}
	[woody] - pstotext 1.8g-5woody1 (medium)
	[sarge] - pstotext 1.9-1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (glibc transition, builds)
[30 Aug 2005] DSA-791-1 maildrop - missing privilege release
	{CVE-2005-2655}
	[sarge] - maildrop 1.5.3-1.1sarge1
	[woody] - maildrop <not-affected> (not affected according to the DSA)
	NOTE: not fixed in testing at time of DSA (glibc transition)
	NOTE: but fixed in secure-testing repo
[30 Aug 2005] DSA-790-1 phpldapadmin - programming error
	{CVE-2005-2654}
	[sarge] - phpldapadmin 0.9.5-3sarge2 (medium)
	NOTE: fixed in testing at time of DSA
[29 Aug 2005] DSA-789-1 php4 - several
	{CVE-2005-1751 CVE-2005-1921 CVE-2005-2498}
	[woody] - php4 4:4.1.2-7.woody5 (high)
	[sarge] - php4 4:4.3.10-16 (high)
	NOTE: not fixed in testing at time of DSA (not uploaded yet)
[29 Aug 2005] DSA-788-1 kismet - several
	{CVE-2005-2626 CVE-2005-2627}
	[woody] - kismet <not-affected> (not affected according to DSA)
	[sarge] - kismet 2005.04.R1-1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (glibc transition)
	NOTE: but fixed in secure-testing repo
[26 Aug 2005] DSA-787-1 backup-manager - insecure permissions and tempfile
	{CVE-2005-1855 CVE-2005-1856}
	[sarge] - backup-manager 0.5.7-1sarge1 (medium)
	NOTE: fixed in testing at time of DSA
[26 Aug 2005] DSA-786-1 simpleproxy - format string vulnerability
	{CVE-2005-1857}
	[sarge] - simpleproxy 3.2-3sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (embargoed disclosure)
[25 Aug 2005] DSA-785-1 libpam-ldap - authentication bypass
	{CVE-2005-2641 CVE-2005-2069}
	[woody] - libpam-ldap <not-affected> (not affected according to DSA)
	[sarge] - libpam-ldap 178-1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (embargoed disclosure)
[25 Aug 2005] DSA-784-1 courier - programming error
	{CVE-2005-2151}
	[woody] - courier <not-affected> (no SPF support)
	[sarge] - courier 0.47-4sarge1 (low)
	NOTE: not fixed in testing at time of DSA (glibc transition)
[24 Aug 2005] DSA-783-1 mysql-dfsg-4.1 - insecure temporary file
	{CVE-2005-1636}
	[sarge] - mysql-dfsg-4.1 4.1.11a-4sarge1 (low)
[23 Aug 2005] DSA-782-1 bluez-utils - missing input sanitising
	{CVE-2005-2547}
	[sarge] - bluez-utils 2.15-1.1 (high)
	NOTE: not fixed in testing at time of DSA (missing builds)
[23 Aug 2005] DSA-781-1 mozilla-thunderbird - several
	{CVE-2005-0989 CVE-2005-1159 CVE-2005-1160 CVE-2005-1532 CVE-2005-2261 CVE-2005-2265 CVE-2005-2266 CVE-2005-2269 CVE-2005-2270}
	[sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.6 (medium)
	NOTE: not fixed in testing at time of DSA (missing builds)
[22 Aug 2005] DSA-780-1 kdegraphics - wrong input sanitising
	{CVE-2005-2097}
	[woody] - kdegraphics <not-affected> (not affected according to DSA)
	[sarge] - kdegraphics 4:3.3.2-2sarge1 (bug #322458; low)
	NOTE: not fixed in testing at time of DSA (nor in unstable; C++ ABI transition)
[21 Aug 2005] DSA-779-1 mozilla-firefox - several
	{CVE-2005-2260 CVE-2005-2261 CVE-2005-2262 CVE-2005-2263 CVE-2005-2264 CVE-2005-2265 CVE-2005-2266 CVE-2005-2267 CVE-2005-2268 CVE-2005-2269 CVE-2005-2270}
	[sarge] - mozilla-firefox 1.0.4-2sarge2 (medium)
	NOTE: not fixed in testing at time of DSA (build and deps)
[19 Aug 2005] DSA-778-1 mantis - missing input sanitising
	{CVE-2005-2556 CVE-2005-2557}
	[sarge] - mantis 0.19.2-4 (medium)
	NOTE: not fixed in testing at time of DSA (nor unstable)
[17 Aug 2005] DSA-777-1 mozilla - frame injection spoofing
	{CVE-2004-0718 CVE-2005-1937}
	[sarge] - mozilla 2:1.7.8-1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on builds)
[16 Aug 2005] DSA-776-1 clamav - integer overflows, infinite loop
	{CVE-2005-2450}
	[sarge] - clamav 0.84-2.sarge.2 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies)
[12 Aug 2005] DSA-775-1 mozilla-firefox - frame injection spoofing
	{CVE-2004-0718 CVE-2005-1937}
	[sarge] - mozilla-firefox 1.0.4-2sarge1 (medium)
	NOTE: IMO the information about the sid fix in the DSA is wrong, pinged security@
	NOTE: fixed in testing at time of DSA
[12 Aug 2005] DSA-774-1 fetchmail - buffer overflow
	{CVE-2005-2335}
	[woody] - fetchmail <not-affected> (not affected according to DSA)
	[sarge] - fetchmail 6.2.5-12sarge1 (medium)
	NOTE: fixed in testing at time of DSA
[11 Aug 2005] DSA-773-1 New amd64 packages fix several bugs
	NOTE: amd64 catch-up DSA, no new holes
[03 Aug 2005] DSA-772-1 apt-cacher - missing input sanitising
	{CVE-2005-1854}
	[sarge] - apt-cacher 0.9.4sarge1 (high)
	NOTE: not fixed in testing at time of DSA (not uploaded to unstable yet)
[01 Aug 2005] DSA-771-1 pdns - several
	{CVE-2005-2301 CVE-2005-2302}
	[sarge] - pdns 2.9.17-13sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (too young)
[29 Jul 2005] DSA-770-1 gopher - insecure tmpfile handling
	{CVE-2005-1853}
	[woody] - gopher 3.0.3woody3
	[sarge] - gopher 3.0.7sarge1
	NOTE: not fixed in testing at time of DSA (Debian server outage)
[29 Jul 2005] DSA-769-1 gaim - memory alignment bug
	{CVE-2005-2370}
	[sarge] - gaim 1:1.2.1-1.4 (low)
	NOTE: not fixed in testing at time of DSA (?)
[27 Jul 2005] DSA-768-1 phpbb2 - missing input validation
	{CVE-2005-2161}
	[sarge] - phpbb2 2.0.13+1-6sarge1
	NOTE: not fixed in testing at time of DSA (Debian server outage)
[27 Jul 2005] DSA-767-1 ekg - integer overflows
	{CVE-2005-1852}
	[sarge] - ekg 1:1.5+20050411-5 (medium)
	NOTE: not fixed in testing at time of DSA (Debian server outage)
[26 Jul 2005] DSA-766-1 webcalendar - authorisation failure
	{CVE-2005-2320}
	[sarge] - webcalendar 0.9.45-4sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (Debian server outage)
[22 Jul 2005] DSA-765-1 heimdal - buffer overflow
	{CVE-2005-0469}
	[woody] - heimdal 0.4e-7.woody.11 (medium)
	NOTE: fixed in testing at time of DSA
[21 Jul 2005] DSA-764-1 cacti - several
	{CVE-2005-1524 CVE-2005-1525 CVE-2005-1526 CVE-2005-2148 CVE-2005-2149}
	[woody] - cacti 0.6.7-2.5 (high)
	[sarge] - cacti 0.8.6c-7sarge2 (high)
	NOTE: fixed in testing at time of DSA
	NOTE: DSA information is incorrect, sid fix is 6f, not 6e
[20 Jul 2005] DSA-763-1 zlib - buffer overflow
	{CVE-2005-1849}
	[woody] - zlib <not-affected> (vulnerable code introduced later)
	[sarge] - zlib 1:1.2.2-4.sarge.2 (medium)
	NOTE: not fixed in testing at time of DSA (only 1/2 days old, not built on s390)
[19 Jul 2005] DSA-762-1 affix - several
	{CVE-2005-2250 CVE-2005-2277}
	[sarge] - affix 2.1.1-2 (medium)
	NOTE: not fixed in testing at time of DSA (only 2/2 days old)
[19 Jul 2005] DSA-761-2 heartbeat - insecure temporary files
	{CVE-2005-2231}
	[woody] - heartbeat 0.4.9.0l-7.3 (medium)
	[sarge] - heartbeat 1.2.3-9sarge3 (medium)
	NOTE: not fixed in testing at time of DSA (only 0/2 days old)
[18 Jul 2005] DSA-760-1 ekg - several
	{CVE-2005-1850 CVE-2005-1851 CVE-2005-1916}
	[sarge] - ekg 1:1.5+20050411-4 (low)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies, not built on five archs)
[18 Jul 2005] DSA-759-1 phppgadmin - missing input sanitising
	{CVE-2005-2256}
	[woody] - phppgadmin <not-affected> (not affected according to the DSA)
	[sarge] - phppgadmin 3.5.2-5 (medium)
	NOTE: not fixed in testing at time of DSA (only 0/10 days old)
[18 Jul 2005] DSA-758-1 heimdal - buffer overflow
	{CVE-2005-2040}
	[woody] - heimdal 0.4e-7.woody.10 (medium)
	[sarge] - heimdal 0.6.3-10sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies)
[17 Jul 2005] DSA-757-1 krb5 - buffer overflow, double-free memory
	{CVE-2005-1689 CVE-2005-1174 CVE-2005-1175}
	[woody] - krb5 1.2.4-5woody10 (medium)
	[sarge] - krb5 1.3.6-2sarge2 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies, not built on m68k)
[14 Jul 2005] DSA-746-1 phpgroupware - remote command execution
	{CVE-2005-1921}
	[woody] - phpgroupware <unfixed> (high)
	[sarge] - phpgroupware 0.9.16.005-3.sarge0 (high)
	NOTE: fixed in testing at time of DSA
[13 Jul 2005] DSA-756-1 squirrelmail - several
	{CVE-2005-1769 CVE-2005-2095}
	[woody] - squirrelmail 1:1.2.6-4 (medium)
	[sarge] - squirrelmail 2:1.4.4-6sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (only 0/2 days old)
[13 Jul 2005] DSA-755-1 tiff - buffer overflow 
	{CVE-2005-1544}
	[woody] - tiff 3.5.5-7 (medium)
	NOTE: fixed in testing at time of DSA
[13 Jul 2005] DSA-754-1 centericq - insecure temporary file
	{CVE-2005-1914}
	[woody] - centericq <not-affected> (not affected according to DSA)
	[sarge] - centericq 4.20.0-1sarge1 (low)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies)
[12 Jul 2005] DSA-753-1 gedit - format string
	{CVE-2005-1686}
	[woody] - gedit <not-affected> (not affected according to DSA)
	[sarge] - gedit 2.8.3-4sarge1 (low)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies)
[11 Jul 2005] DSA-752-1 gzip - several
	{CVE-2005-0988 CVE-2005-1228}
	[woody] - gzip 1.3.2-3woody5
	NOTE: fixed in testing at time of DSA
[11 Jul 2005] DSA-751-1 squid - IP spoofing
	{CVE-2005-1519}
	[woody] - squid 2.4.6-2woody9
	NOTE: fixed in testing at time of DSA
[10 Jul 2005] DSA-748-1 ruby1.8 - bad default value
	{CVE-2005-1992}
	[sarge] - ruby1.8 1.8.2-7sarge1 (medium)
	NOTE: not fixed in testing at time of DSA (waiting on dependencies)
[11 Jul 2005] DSA-750-1 dhcpcd - out-of-bound memory access
	{CVE-2005-1848}
	[sarge] - dhcpcd 1:1.3.22pl4-21sarge1
	NOTE: fixed in testing at time of DSA
[10 Jul 2005] DSA-749-1 ettercap - format string error
	{CVE-2005-1796}
	[sarge] - ettercap 1:0.7.1-1sarge1 (medium)
	NOTE: fixed in testing at time of DSA
[10 Jul 2005] DSA-747-1 egroupware - input validation error
	{CVE-2005-1921}
	[sarge] - egroupware 1.0.0.007-2.dfsg-2sarge1 (high)
	NOTE: not fixed in testing at time of DSA (only 1/2 days old)
[10 Jul 2005] DSA-745-1 drupal - arbitrary command execution
	{CVE-2005-1921 CVE-2005-2106}
	[sarge] - drupal 4.5.3-3 (high)
	NOTE: fixed in testing at time of DSA
[08 Jul 2005] DSA-744-1 fuse - programming error
	{CVE-2005-1858}
	[sarge] - fuse 2.2.1-4sarge2
	NOTE: fixed in testing at time of DSA
[08 Jul 2005] DSA-743-1 ht - buffer overflows, integer overflows
	{CVE-2005-1545 CVE-2005-1546}
	[woody] - ht 0.5.0-1woody4
	[sarge] - ht 0.8.0-2sarge4
	NOTE: fixed in testing at time of DSA
[09 Jul 2005] DSA-742-1 cvs - buffer overflow
	{CVE-2005-0753}
	[woody] - cvs 1.11.1p1debian-12
	NOTE: fixed in testing at time of DSA
[07 Jul 2005] DSA-741-1 bzip2 - infinite loop
	{CVE-2005-1260}
	[woody] - bzip2 1.0.2-1.woody5 (low)
	NOTE: fixed in testing at time of DSA
[06 Jul 2005] DSA-740-1 zlib - buffer overflow
	{CVE-2005-2096}
	[woody] - zlib <not-affected> (vulnerability was introduced later)
	[sarge] - zlib 1:1.2.2-4.sarge.1 (medium)
	NOTE: anything statically linking zlib needs rebuild
	NOTE: not fixed in testing at time of DSA (embargoed disclosure)
[06 Jul 2005] DSA-739-1 trac - missing input sanitising
	{CVE-2005-2147}
	[sarge] - trac 0.8.1-3sarge2 (medium)
	NOTE: fixed in testing at time of DSA
[19 May 2005] DSA-725-2 ppxp - missing privilege release
	{CVE-2005-0392}
	[sarge] - ppxp 0.2001080415-10sarge2
	NOTE: fixed in testing at time of DSA
[05 Jul 2005] DSA-738-1 razor - email header parsing error
	{CVE-2005-2024}
	[woody] - razor <not-affected> (not affected according to DSA)
	[sarge] - razor 2.670-1sarge2 (low)
	NOTE: not fixed in testing at time of DSA (not built on arm)
[05 Jul 2005] DSA-737-1 clamav - various DOS vulnerabilities
	{CVE-2005-1922 CVE-2005-1923 CVE-2005-2056 CVE-2005-2070}
	[sarge] - clamav 0.84-2.sarge.1 (medium)
	NOTE: not fixed in testing at time of DSA (uploaded with low urgency only, one fix missing for sid)
[05 Jul 2005] DSA-734-1 gaim - denial of service
	{CVE-2005-1269 CVE-2005-1934}
	[woody] - gaim <not-affected> (DSA: "does not seem to be affected")
	[sarge] - gaim 1:1.2.1-1.3
	NOTE: not fixed in testing at time of DSA (not built on sparc)
[01 Jul 2005] DSA-736-2 spamassassin - mail header parsing error
	{CVE-2005-1266}
	[woody] - spamassassin <not-affected> (not vulnerable according to DSA)
	[sarge] - spamassassin 3.0.3-2
	NOTE: fixed in testing at time of DSA
	NOTE: Some architectures were not ready, that's why another DSA was
	NOTE: issued.
[01 Jul 2005] DSA-736-1 spamassassin - mail header parsing error
	{CVE-2005-1266}
	[woody] - spamassassin <not-affected> (not vulnerable according to DSA)
	[sarge] - spamassassin 3.0.3-2
	NOTE: fixed in testing at time of DSA
[08 Jul 2005] DSA-735-2 sudo - pathname validation race
	{CVE-2005-1993}
	[woody] - sudo 1.6.6-1.3woody1 (medium)
	[sarge] - sudo 1.6.8p7-1.1sarge1 (medium)
	NOTE: fixed in testing at time of DSA
	NOTE: Some architectures were not ready, that's why another DSA was
	NOTE: issued.
[01 Jul 2005] DSA-735-1 sudo - pathname validation race
	{CVE-2005-1993}
	[woody] - sudo 1.6.6-1.3woody1 (medium)
	[sarge] - sudo 1.6.8p7-1.1sarge1 (medium)
	NOTE: not fixed in testing at time of DSA
[30 Jun 2005] DSA-733-1 crip - insecure temporary files
	{CVE-2005-0393}
	[sarge] - crip 3.5-1sarge2 (low)
	NOTE: not fixed in testing at time of DSA (reserved)
[03 Jun 2005] DSA-732-1 mailutils - several
        {CVE-2005-1520 CVE-2005-1521 CVE-2005-1522 CVE-2005-1523}
        [woody] - mailutils 20020409-1woody2
	NOTE: fixed in testing at time of DSA
[02 Jun 2005] DSA-731-1 krb4 - buffer overflows
	{CVE-2005-0468 CVE-2005-0469}
	[woody] - krb4 1.1-8-2.4
	NOTE: fixed in testing at time of DSA
[27 May 2005] DSA-730-1 bzip2 - race condition
	{CVE-2005-0953}
	[woody] - bzip2 1.0.2-1.woody2
	NOTE: fixed in testing at time of DSA
[26 May 2005] DSA-729-1 php4 - missing input sanitising
	{CVE-2005-0525}
	[woody] - php4 4:4.1.2-7.woody4
	NOTE: fixed in testing at time of DSA
[25 May 2005] DSA-728-1 qpopper - missing privilege release
	{CVE-2005-1151 CVE-2005-1152}
	[woody] - qpopper 4.0.4-2.woody.5
	NOTE: fixed in testing at time of DSA by security team
[20 May 2005] DSA-727-1 libconvert-uulib-perl - buffer overflow
	{CVE-2005-1349}
	[woody] - libconvert-uulib-perl 0.201-2woody1
	NOTE: fixed in testing at time of DSA
[20 May 2005] DSA-726-1 oops - format string vulnerability
	{CVE-2005-1121}
	[woody] - oops 1.5.19.cvs.20010818-0.1woody1
	NOTE: not in testing at time of DSA
[19 May 2005] DSA-725-1 ppxp - missing privilege release
	{CVE-2005-0392}
	[woody] - ppxp 0.2001080415-6woody2
	NOTE: not fixed in testing at time of DSA
[18 May 2005] DSA-724-1 phpsysinfo - design flaw
	{CVE-2005-0870}
	[woody] - phpsysinfo 2.0-3woody2
	NOTE: fixed in testing at time of DSA
[09 May 2005] DSA-723-1 xfree86 - buffer overflow
	{CVE-2005-0605}
	[woody] - xfree86 4.1.0-16woody6
	NOTE: not fixed in testing at time of DSA
[09 May 2005] DSA-722-1 smail - buffer overflow
	{CVE-2005-0892}
	[woody] - smail 3.2.0.114-4woody1
	NOTE: Package not in testing at time of DSA
[06 May 2005] DSA-721-1 squid - design flaw
	{CVE-2005-1345}
	[woody] - squid 2.4.6-2woody8
	NOTE: not fixed in testing at time of DSA
[03 May 2005] DSA-720-1 smartlist - wrong input processing
	{CVE-2005-0157}
	[woody] - smartlist 3.15-5.woody.1
	NOTE: fixed in testing at time of DSA
[28 Apr 2005] DSA-719-1 prozilla - format string problems
	{CVE-2005-0523}
	[woody] - prozilla 1:1.3.6-3woody2
	NOTE: fixed in testing at time of DSA
[28 Apr 2005] DSA-718-1 ethereal - buffer overflow
	{CVE-2005-0739}
	[woody] - ethereal 0.9.4-1woody12
	NOTE: fixed in testing at time of DSA
[27 Apr 2005] DSA-717-1 lsh-utils - buffer overflow, typo
	{CVE-2003-0826 CVE-2005-0814}
	[woody] - lsh-utils 1.2.5-2woody3
	NOTE: fixed in testing at time of DSA
[27 Apr 2005] DSA-716-1 gaim - denial of service
	{CVE-2005-0472}
	[woody] - gaim 1:0.58-2.5
	NOTE: fixed in testing at time of DSA
[27 Apr 2005] DSA-715-1 cvs - several
	{CVE-2004-1342 CVE-2004-1343}
	[woody] - cvs 1.11.1p1debian-10
	NOTE: not fixed in testing at time of DSA
[26 Apr 2005] DSA-714-1 kdelibs - several
	{CVE-2005-1046}
	[woody] - kdelibs 4:2.2.2-13.woody.14
	NOTE: not fixed in testing at time of DSA
[21 Apr 2005] DSA-701-2 samba - integer overflows
	NOTE: only a bug in the backported fix to stable, testing is ok
[21 Apr 2005] DSA-713-1 junkbuster - several
	{CVE-2005-1108 CVE-2005-1109}
	[woody] - junkbuster 2.0.2-0.2woody1 (bug #304793)
[19 Apr 2005] DSA-712-1 geneweb - insecure file operations
	{CVE-2005-0391}
	[woody] - geneweb 4.06-2woody1
	NOTE: fixed in testing at time of DSA
[19 Apr 2005] DSA-711-1 info2www - missing input sanitising
	{CVE-2004-1341}
	[woody] - info2www 1.2.2.9-20woody1
	NOTE: fixed in testing at time of DSA
[18 Apr 2005] DSA-710-1 gtkhtml - null pointer dereference
	{CVE-2003-0541}
	[woody] - gtkhtml 1.0.2-1.woody1
	NOTE: fixed in testing at time of DSA
[15 Apr 2005] DSA-709-1 libexif - buffer overflow
	{CVE-2005-0664}
	[woody] - libexif 0.5.0-1woody1 (bug #298464)
[15 Apr 2005] DSA-708-1 php3 - missing input sanitising
	{CVE-2005-0525}
	[woody] - php3 3:3.0.18-23.1woody3 (bug #302701)
[13 Apr 2005] DSA-707-1 mysql - several
	{CVE-2004-0957 CVE-2005-0709 CVE-2005-0710 CVE-2005-0711}
	[woody] - mysql 3.23.49-8.11
	NOTE: not fixed in testing at time of DSA
[13 Apr 2005] DSA-706-1 axel - buffer overflow
	{CVE-2005-0390}
	[woody] - axel 1.0a-1woody1
	NOTE: fixed in testing at time of DSA
[04 Apr 2005] DSA-705-1 wu-ftpd - missing input sanitising
	{CVE-2005-0256}
	[woody] - wu-ftpd 2.6.2-3woody5
	NOTE: DSA mentions CVE-2003-0854 as fixed, but this update only 
	NOTE: contains a workaround.
[04 Apr 2005] DSA-704-1 remstats - tempfile, missing input sanitising
	{CVE-2005-0387 CVE-2005-0388}
	[woody] - remstats 1.00a4-8woody1
	NOTE: not fixed in testing at time of DSA
[01 Apr 2005] DSA-703-1 krb5 - buffer overflows
	{CVE-2005-0468 CVE-2005-0469}
	[woody] - krb5 1.2.4-5woody8
[01 Apr 2005] DSA-702-1 imagemagick - several
	{CVE-2005-0397 CVE-2005-0759 CVE-2005-0760 CVE-2005-0762}
	[woody] - imagemagick 4:5.4.4.5-1woody6
[31 Mar 2005] DSA-701-1 samba - integer overflows
	{CVE-2004-1154}
	[woody] - samba 2.2.3a-15
[30 Mar 2005] DSA-700-1 mailreader - missing input sanitising
	{CVE-2005-0386}
	[woody] - mailreader 2.3.29-5woody2
	NOTE: not fixed in testing at time of DSA
[29 Mar 2005] DSA-699-1 netkit-telnet-ssl - buffer overflow
	{CVE-2005-0469}
	[woody] - netkit-telnet-ssl 0.17.17+0.1-2woody4
	NOTE: not fixed in testing at time of DSA
[29 Mar 2005] DSA-698-1 mc - buffer overflow
	{CVE-2005-0763}
	[woody] - mc 4.5.55-1.2woody6
	NOTE: Seems to be a "fix the fix", correcting a previous DSA.
[29 Mar 2005] DSA-697-1 netkit-telnet - buffer overflow
	{CVE-2005-0469}
	[woody] - netkit-telnet 0.17-18woody3
	NOTE: not fixed in testing at time of DSA
[22 Mar 2005] DSA-696-1 perl - design flaw
	{CVE-2005-0448}
	[woody] - perl 5.6.1-8.9
	NOTE: fixed in testing at time of DSA
	NOTE: (sid version in DSA is 5.8.4-8, but 5.8.4-7 is more correct)
[21 Mar 2005] DSA-695-1 xli - buffer overflow, input sanitising, integer overflow
	{CVE-2001-0775 CVE-2005-0638 CVE-2005-0639}
	[woody] - xli 1.17.0-11woody1
	NOTE: not fixed in testing at time of DSA
[21 Mar 2005] DSA-694-1 xloadimage - missing input sanitising, integer overflow
	{CVE-2005-0638 CVE-2005-0639}
	[woody] - xloadimage 4.1-10woody1
	NOTE: not fixed in testing at time of DSA
[14 Mar 2005] DSA-693-1 luxman - buffer overflow
	{CVE-2005-0385}
	NOTE: not fixed in testing at time of DSA
	NOTE: not in unstable at time of DSA though DSA claimed it was
	[woody] - luxman 0.41-17.2
[14 Mar 2005] DSA-662-2 squirrelmail - several
	NOTE: only an update to a prior DSA, did not affct sid/sarge.
[08 Mar 2005] DSA-692-1 kppp - design flaw
	{CVE-2005-0205}
	[woody] - kdenetwork 4:2.2.2-14.7
	NOTE: fixed in testing at time of DSA
[07 Mar 2005] DSA-691-1 abuse - several 
	{CVE-2005-0098 CVE-2005-0099}
	[woody] - abuse 2.00+-3woody4
	NOTE: not in unstable/testing
[25 Feb 2005] DSA-690-1 bsmtpd - missing input sanitising
	{CVE-2005-0107}
	[woody] - bsmtpd 2.3pl8b-12woody1
	NOTE: not fixed in testing at time of DSA
[23 Feb 2005] DSA-689-1 libapache-mod-python - missing input sanitising
	{CVE-2005-0088}
	[woody] - libapache-mod-python 2:2.7.8-0.0woody5
	NOTE: fixed in testing at time of DSA
[23 Feb 2005] DSA-688-1 squid - mising input sanitising
	{CVE-2005-0446}
	[woody] - squid 2.4.6-2woody7
	NOTE: fixed in testing at time of DSA
[21 Feb 2005] DSA-674-3 mailman - cross-site scripting, directory traversal
	NOTE: only fixed bug in DSA
[18 Feb 2005] DSA-687-1 bidwatcher - format string
	{CVE-2005-0158}
	[woody] - bidwatcher 1.3.3-1woody1
	NOTE: not fixed in testing at time of DSA
[17 Feb 2005] DSA-686-1 gftp - missing input sanitising
	{CVE-2005-0372}
	[woody] - gftp 2.0.11-1woody1
	NOTE: not fixed in testing at time of DSA
[17 Feb 2005] DSA-685-1 emacs21 - format string
	{CVE-2005-0100}
	[woody] - emacs21 21.2-1woody3
	NOTE: not fixed in testing at time of DSA
[16 Feb 2005] DSA-684-1 typespeed - format string
	{CVE-2005-0105}
	[woody] - typespeed 0.4.4-8
	NOTE: not fixed in testing at time of DSA
[15 Feb 2005] DSA-683-1 postgresql - buffer overflows
	{CVE-2005-0245 CVE-2005-0247}
	[woody] - postgresql 7.2.1-2woody8
	NOTE: fixed in testing at time of DSA
[15 Feb 2005] DSA-682-1 awstats - missing input sanitising
	{CVE-2005-0363}
	[woody] - awstats 4.0-0.woody.2
	NOTE: not fixed in testing at time of DSA
[14 Feb 2005] DSA-681-1 synaesthesia - privilege escalation
	{CVE-2005-0070}
	[woody] - synaesthesia 2.1-2.1woody3
	NOTE: does not apply for sarge, program is not setuid anymore
[14 Feb 2005] DSA-680-1 htdig - unsanitised input
	{CVE-2005-0085}
	[woody] - htdig 3.1.6-3woody1
	NOTE: fixed in testing at time of DSA
[14 Feb 2005] DSA-679-1 toolchain-source - insecure temporary files
	{CVE-2005-0159}
	[woody] - toolchain-source 3.0.4-1woody1
	NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-678-1 netkit-rwho - missing input validation
	{CVE-2004-1180}
	[woody] - netkit-rwho 0.17-4woody2
	NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-677-1 sympa - buffer overflow
	{CVE-2005-0073}
	[woody] - sympa 3.3.3-3woody2
	NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-676-1 xpcd - buffer overflow
	{CVE-2005-0074}
	[woody] - xpcd 2.08-8woody3
	NOTE: not fixed in testing at time of DSA
[11 Feb 2005] DSA-674-2 mailman - cross-site scripting, directory traversal
	NOTE: only fixed bug in DSA
[10 Feb 2005] DSA-675-1 hztty - privilege escalation
	{CVE-2005-0019}
	[woody] - hztty 2.0-5.2woody2
	NOTE: not fixed in testing at time of DSA
[10 Feb 2005] DSA-674-1 mailman - cross-site scripting, directory traversal
	{CVE-2004-1177 CVE-2005-0202}
	[woody] - mailman 2.0.11-1woody11
	NOTE: not fixed in testing at time of DSA
[10 Feb 2005] DSA-673-1 evolution - integer overflow
	{CVE-2005-0102}
	[woody] - evolution 1.0.5-1woody2
	NOTE: fixed in testing at time of DSA
[09 Feb 2005] DSA-672-1 xview - buffer overflows
	{CVE-2005-0076}
	[woody] - xview 3.2p1.4-16woody2
	NOTE: not fixed in testing at time of DSA
[08 Feb 2005] DSA-671-1 xemacs21 - format string
	{CVE-2005-0100}
	NOTE: not fixed in testing at time of DSA
	[woody] - xemacs21 21.4.6-8woody2
[08 Feb 2005] DSA-670-1 emacs20 - format string
	{CVE-2005-0100}
	[woody] - emacs20 20.7-13.3
	NOTE: also affects emacs21 in unstable, fixed
[04 Feb 2005] DSA-669-1 php3 - several
	{CVE-2004-0594 CVE-2004-0595}
	[woody] - php3 3:3.0.18-23.1woody2
	NOTE: fixed in testing at time of DSA
[04 Feb 2005] DSA-668-1 postgresql - privilege escalation
	{CVE-2005-0227}
	[woody] - postgresql 7.2.1-2woody7
	NOTE: not fixed in testing at time of DSA
[04 Feb 2005] DSA-667-1 squid - several
	{CVE-2005-0173 CVE-2005-0175 CVE-2005-0194 CVE-2005-0211}
	[woody] - squid 2.4.6-2woody6
	NOTE: not fixed in testing at time of DSA
[04 Feb 2005] DSA-666-1 python2.2 - design flaw
	{CVE-2005-0089}
	[woody] - python2.2 2.2.1-4.7
	NOTE: not fixed in testing at time of DSA
[04 Feb 2005] DSA-665-1 ncpfs - missing privilege release
	{CVE-2005-0013}
	[woody] - ncpfs 2.2.0.18-10woody2
	NOTE: not fixed in testing at time of DSA
[02 Feb 2005] DSA-664-1 cpio - broken file permissions
	{CVE-1999-1572}
	[woody] - cpio 2.4.2-39woody1
	NOTE: not fixed in testing at time of DSA
[02 Feb 2005] DSA-663-1 prozilla - buffer overflows
	{CVE-2004-1120}
	[woody] - prozilla 1:1.3.6-3woody3
	NOTE: fixed in testing at time of DSA
[01 Feb 2005] DSA-662-1 squirrelmail - several
	{CVE-2005-0104 CVE-2005-0152}
	[woody] - squirrelmail 1:1.2.6-3
	NOTE: CVE-2005-0152 only exists in 1.2.6 version
	NOTE: fixed in testing at time of DSA
[20 Apr 2005] DSA-661-2 f2c - insecure temporary files
	{CVE-2005-0017 CVE-2005-0018}
	[woody] - f2c 20010821-3.2 (bug #292792)
	NOTE: not fixed in testing at time of DSA
[26 Jan 2005] DSA-660-1 kdebase - missing return value check
	{CVE-2005-0078}
	[woody] - kdebase 4:2.2.2-14.9
	NOTE: fixed in testing at time of DSA
[26 Jan 2005] DSA-659-1 libpam-radius-auth - information leak, integer underflow
	{CVE-2004-1340 CVE-2005-0108}
	[woody] - libpam-radius-auth 1.3.14-1.3
	NOTE: 1/2 fixed in testing at time of DSA
[25 Jan 2005] DSA-658-1 libdbi-perl - insecure temporary file
	{CVE-2005-0077}
	[woody] - libdbi-perl 1.21-2woody2
	NOTE: not fixed in testing at time of DSA
[25 Jan 2005] DSA-657-1 xine-lib - buffer overflow
	{CVE-2004-1379}
	[woody] - xine-lib 0.9.8-2woody2
	NOTE: fixed in testing at time of DSA
[25 Jan 2005] DSA-656-1 vdr - insecure file access
	{CVE-2005-0071}
	[woody] - vdr 1.0.0-1woody2
	NOTE: not fixed in testing at time of DSA
[25 Jan 2005] DSA-655-1 zhcon - missing privilege release
	{CVE-2005-0072}
	[woody] - zhcon 1:0.2-4woody3
	NOTE: not fixed in testing at time of DSA
[21 Jan 2005] DSA-654-1 enscript - several
	{CVE-2004-1184 CVE-2004-1185 CVE-2004-1186}
	[woody] - enscript 1.6.3-1.3
	NOTE: not fixed in testing at time of DSA
[21 Jan 2005] DSA-653-1 ethereal - buffer overflow
	{CVE-2005-0084}
	[woody] - ethereal 0.9.4-1woody11
	NOTE: not fixed in testing at time of DSA
[21 Jan 2005] DSA-652-1 unarj
	{CVE-2004-0947 CVE-2004-1027}
	[woody] - unarj 2.43-3woody1
	NOTE: package was in non-free, different code base
[20 Jan 2005] DSA-651-1 squid - buffer overflow, integer overflow
	{CVE-2005-0094 CVE-2005-0095}
	[woody] - squid 2.4.6-2woody5
	NOTE: not fixed in testing at time of DSA
[20 Jan 2005] DSA-650-1 sword - missing input sanitising
	{CVE-2005-0015}
	[woody] - sword 1.5.3-3woody2
	NOTE: not fixed in testing at time of DSA
[20 Jan 2005] DSA-649-1 xtrlock - buffer overflow
	{CVE-2005-0079}
	[woody] - xtrlock 2.0-6woody2
	NOTE: fixed in testing at time of DSA
[19 Jan 2005] DSA-648-1 xpdf - buffer overflow
	{CVE-2005-0064}
	[woody] - xpdf 1.00-3.4
	NOTE: not fixed in testing at time of DSA
[19 Jan 2005] DSA-647-1 mysql - insecure temporary files
	{CVE-2005-0004}
	[woody] - mysql 3.23.49-8.9
	NOTE: not fixed in testing at time of DSA
[19 Jan 2005] DSA-646-1 imagemagick - buffer overflow
	{CVE-2005-0005}
	[woody] - imagemagick 4:5.4.4.5-1woody5
	NOTE: not fixed in testing at time of DSA
[19 Jan 2005] DSA-645-1 cupsys - buffer overflow
	{CVE-2005-0064}
	NOTE: cupsys not affected in sarge, though other programs are vulnerable
	NOTE: see CVE/list
	[woody] - cupsys 1.1.14-5woody12
	NOTE: not fixed in testing at time of DSA
[18 Jan 2005] DSA-644-1 chbg - buffer overflow
	{CVE-2004-1264}
	[woody] - chbg 1.5-1woody1
	NOTE: fixed in testing at time of DSA
[18 Jan 2005] DSA-643-1 queue - buffer overflows
	{CVE-2004-0555}
	[woody] - queue 1.30.1-4woody2
	NOTE: not fixed in testing at time of DSA
[17 Jan 2005] DSA-642-1 gallery - several
	{CVE-2004-1106}
	[woody] - gallery 1.2.5-8woody3
	NOTE: fixed in testing at time of DSA
[17 Jan 2005] DSA-641-1 playmidi - buffer overflow
	{CVE-2005-0020}
	[woody] - playmidi 2.4-4woody1
	NOTE: not fixed in testing at time of DSA
[17 Jan 2005] DSA-640-1 gatos - buffer overflow
	{CVE-2005-0016}
	[woody] - gatos 0.0.5-6woody3
	NOTE: not fixed in testing at time of DSA
[14 Jan 2005] DSA-639-1 mc - several
	{CVE-2004-1004 CVE-2004-1005 CVE-2004-1009 CVE-2004-1090 CVE-2004-1091 CVE-2004-1092 CVE-2004-1093 CVE-2004-1174 CVE-2004-1175 CVE-2004-1176}
	NOTE: unstable not vulnerable according to DSA
	NOTE: DSA was wrong..
	[woody] - mc 4.5.55-1.2woody5
	NOTE: not fixed in testing at time of DSA
[13 Jan 2005] DSA-638-1 gopher - several
	{CVE-2004-0560 CVE-2004-0561}
	[woody] - gopher 3.0.3woody2
	NOTE: gopherd binary package removed post-woody
[13 Jan 2005] DSA-637-1 exim-tls - buffer overflow
	{CVE-2005-0021}
	[woody] - exim-tls 3.35-3woody3
	NOTE: not in sarge
[12 Jan 2005] DSA-636-1 glibc - insecure temporary files
	{CVE-2004-0968}
	[woody] - glibc 2.2.5-11.8
	NOTE: fixed in testing at time of DSA
[12 Jan 2005] DSA-635-1 exim - buffer overflow
	{CVE-2005-0021}
	[woody] - exim 3.35-1woody4
	NOTE: exim4 fixed in testing at time of DSA
	NOTE: exim not fixed in testing at time of DSA
[11 Jan 2005] DSA-634-1 hylafax - weak hostname and username validation
	{CVE-2004-1182}
	[woody] - hylafax 1:4.1.1-3.1
	NOTE: fixed in testing at time of DSA
[11 Jan 2005] DSA-633-1 bmv - insecure temporary file
	{CVE-2003-0014}
	[woody] - bmv 1.2-14.2
	NOTE: fixed in testing at time of DSA
[10 Jan 2005] DSA-632-1 linpopup - buffer overflow
	{CVE-2004-1282}
	[woody] - linpopup 1.2.0-2woody1
	NOTE: fixed in testing at time of DSA
[10 Jan 2005] DSA-631-1 kdelibs - unsanitised input
	{CVE-2004-1165}
	[woody] - kdelibs 4:2.2.2-13.woody.13
	NOTE: not fixed in testing at time of DSA
[10 Jan 2005] DSA-630-1 lintian - insecure temporary directory
	{CVE-2004-1000}
	[woody] - lintian 1.20.17.1
	NOTE: not fixed in testing at time of DSA
[07 Jan 2005] DSA-629-1 krb5 - buffer overflow
	{CVE-2004-1189}
	[woody] - krb5 1.2.4-5woody7
	NOTE: not fixed in testing at time of DSA
[06 Jan 2005] DSA-628-1 imlib2 - integer overflows
	{CVE-2004-1026}
	[woody] - imlib2 1.0.5-2woody2
	NOTE: not fixed in testing at time of DSA
[06 Jan 2005] DSA-627-1 namazu2 - unsanitised input
	{CVE-2004-1318}
	[woody] - namazu2 2.0.10-1woody3
	NOTE: not fixed in testing at time of DSA
[06 Jan 2005] DSA-626-1 tiff - unsanitised input
	{CVE-2004-1183}
	[woody] - tiff 3.5.5-6.woody5
	NOTE: not fixed in testing at time of DSA
[05 Jan 2005] DSA-625-1 pcal - buffer overflows
	{CVE-2004-1289}
	[woody] - pcal 4.7-8woody1
	NOTE: not fixed in testing at time of DSA
[05 Jan 2005] DSA-624-1 zip - buffer overflow
	{CVE-2004-1010}
	[woody] - zip 2.30-5woody2
	NOTE: fixed in testing at time of DSA
[04 Jan 2005] DSA-623-1 nasm - buffer overflow
	{CVE-2004-1287}
	[woody] - nasm 0.98.28cvs-1woody2
[03 Jan 2005] DSA-622-1 htmlheadline - insecure temporary files
	{CVE-2004-1181}
	[woody] - htmlheadline 21.8-3
	NOTE: not in unstable
[31 Dec 2004] DSA-621-1 cupsys - buffer overflow
	{CVE-2004-1125}
        [woody] - cupsys 1.1.14-5woody11
[30 Dec 2004] DSA-620-1 perl - insecure temporary files / directories
	{CVE-2004-0452 CVE-2004-0976}
	[woody] - perl 5.6.1-8.8
[30 Dec 2004] DSA-619-1 xpdf - buffer overflow
	{CVE-2004-1125}
	[woody] - xpdf 1.00-3.3
[24 Dec 2004] DSA-618-1 imlib - buffer overflows, integer overflows
	{CVE-2004-1025 CVE-2004-1026}
	[woody] - imlib 1.9.14-2woody2
[24 Dec 2004] DSA-617-1 libtiff - insufficient input validation
	{CVE-2004-1308}
	[woody] - tiff 3.5.5-6.woody3
[23 Dec 2004] DSA-616-1 telnetd-ssl - format string
	{CVE-2004-0998}
	[woody] - netkit-telnet-ssl 0.17.17+0.1-2woody3
[22 Dec 2004] DSA-615-1 debmake - insecure temporary file
	{CVE-2004-1179}
	[woody] - debmake 3.6.10.woody.1
[21 Dec 2004] DSA-614-1 xzgv - integer overflows
	{CVE-2004-0994}
	[woody] - xzgv 0.7-6woody2
[21 Dec 2004] DSA-613-1 ethereal - infinite loop
	{CVE-2004-1142}
	[woody] - ethereal 0.9.4-1woody9
[20 Dec 2004] DSA-612-1 a2ps - unsanitised input
	{CVE-2004-1170}
	- a2ps 1:4.13b-4.2
[20 Dec 2004] DSA-611-1 htget - buffer overflow
	{CVE-2004-0852}
	[woody] - htget 0.93-1.1woody1
[17 Dec 2004] DSA-610-1 cscope - insecure temporary file
	{CVE-2004-0996}
	[woody] - cscope 15.3-1woody2
[14 Dec 2004] DSA-609-1 atari800 - buffer overflows
	{CVE-2004-1076}
	[woody] - atari800 1.2.2-1woody3
[14 Dec 2004] DSA-608-1 zgv - integer overflows, unsanitised input
	{CVE-2004-1095 CVE-2004-0999}
	[woody] - zgv 5.5-3woody1
[10 Dec 2004] DSA-607-1 xfree86 - several
	{CVE-2004-0914}
	[woody] - xfree86 4.1.0-16woody5
[08 Dec 2004] DSA-606-1 nfs-utils - wrong signal handler
	{CVE-2004-1014}
	[woody] - nfs-utils 1.0-2woody2
[06 Dec 2004] DSA-605-1 viewcvs - settings not honored
	{CVE-2004-0915}
	[woody] - viewcvs 0.9.2-4woody1
[03 Dec 2004] DSA-604-1 hpsockd - missing input sanitising
	{CVE-2004-0993}
	[woody] - hpsockd 0.6.woody1
[01 Dec 2004] DSA-603-1 openssl - insecure temporary file
	{CVE-2004-0975}
	[woody] - openssl 0.9.6c-2.woody.7
[29 Nov 2004] DSA-602-1 libgd2 - integer overlow
	{CVE-2004-0941 CVE-2004-0990}
	NOTE: different from fixes from earlier DSA for these CVEs; 2004-0941 new
	[woody] - libgd2 2.0.1-10woody2
[29 Nov 2004] DSA-601-1 libgd1 - integer overflow
	{CVE-2004-0941 CVE-2004-0990}
	NOTE: different from fixes from earlier DSA for these CVEs; 2004-0941 new
	[woody] - libgd 1.8.4-17.woody4
[25 Nov 2004] DSA-599-1 tetex-bin - integer overflows
	{CVE-2004-0888}
	[woody] - tetex-bin 1.0.7+20011202-7.3
[25 Nov 2004] DSA-598-1 yardradius - buffer overflow
	{CVE-2004-0987}
	[woody] - yardradius 1.0.20-2woody1
[25 Nov 2004] DSA-597-1 cyrus-imapd - buffer overflow
	{CVE-2004-1012 CVE-2004-1013}
	[woody] - cyrus21-imapd 1.5.19-9.2
[24 Nov 2004] DSA-596-2 sudo - missing input sanitising
	{CVE-2004-1051}
	[woody] - sudo 1.6.6-1.3
[24 Nov 2004] DSA-595-1 bnc - buffer overflow
	{CVE-2004-1052}
	[woody] - bnc 2.6.4-3.3
[17 Nov 2004] DSA-594-1 apache - buffer overflows
	{CVE-2004-0940}
	[woody] - apache 1.3.26-0woody6
[16 Nov 2004] DSA-593-1 imagemagick - buffer overflow
	{CVE-2004-0981}
	[woody] - imagemagick 5.4.4.5-1woody4
[12 Nov 2004] DSA-592-1 ez-ipupdate - format string
	{CVE-2004-0980}
	[woody] - ez-ipupdate 3.0.11b5-1woody2
[09 Nov 2004] DSA-591-1 libgd2 - integer overflows
	{CVE-2004-0990}
	[woody] - libgd 1.8.4-17.woody3
	[woody] - libgd2 2.0.1-10woody1
[09 Nov 2004] DSA-590-1 gnats - format string vulnerability
	{CVE-2004-0623}
	[woody] - gnats 3.999.beta1+cvs20020303-2
[09 Nov 2004] DSA-589-1 libgd - integer overflows
	{CVE-2004-0990}
	[woody] - libgd 1.8.4-17.woody3
[08 Nov 2004] DSA-588-1 gzip - insecure temporary files
	{CVE-2004-0970}
	[woody] - gzip 1.3.2-3woody3
[08 Nov 2004] DSA-587-1 freeamp - buffer overflow
	{CVE-2004-0964}
	[woody] - freeamp 2.1.1.0-4woody2
	NOTE: Was later renamed to zinf
[08 Nov 2004] DSA-586-1 ruby - infinite loop
	{CVE-2004-0983}
	[woody] - ruby 1.6.7-3woody4
[05 Nov 2004] DSA-585-1 shadow - programming error
	{CVE-2004-1001}
	[woody] - shadow 20000902-12woody1
[04 Nov 2004] DSA-584-1 dhcp - format string vulnerability
	{CVE-2004-1006}
	[woody] - dhcp 2.0pl5-11woody1
[03 Nov 2004] DSA-583-1 lvm10 - insecure temporary directory
	{CVE-2004-0972}
	[woody] - lvm10 1.0.4-5woody2
[02 Nov 2004] DSA-582-1 libxml - buffer overflow
	{CVE-2004-0989}
	[woody] - libxml 1.8.17-2woody2
	[woody] - libxml2 2.4.19-4woody2
[01 Nov 2004] DSA-581-1 xpdf - integer overflows
	{CVE-2004-0888}
 	[woody] - xpdf 1.00-3.2
[01 Nov 2004] DSA-580-1 iptables - missing initialisation
	{CVE-2004-0986}
	[woody] - iptables 1.2.6a-5.0woody2
[01 Nov 2004] DSA-579-1 abiword - buffer overflow
	{CVE-2004-0645}
	[woody] - abiword 1.0.2+cvs.2002.06.05-1woody2
[01 Nov 2004] DSA-578-1 mpg123 - buffer overflow
	{CVE-2004-0982}
	[woody] - mpg123 0.59r-13woody4
[29 Oct 2004] DSA-577-1 postgresql - symlink vulnerability
	{CVE-2004-0977}
	[woody] - postgresql 7.2.1-2woody6
[29 Oct 2004] DSA-576-1 squid - multiple
	{CVE-1999-0710 CVE-2004-0918}
	[woody] - squid 2.4.6-2woody4
[28 Oct 2004] DSA-575-1 catdoc - insecure temporary file
	{CVE-2003-0193}
	[woody] - catdoc 0.91.5-1.woody3
[28 Oct 2004] DSA-574-1 cabextract - missing directory sanitising
	{CVE-2004-0916}
	[woody] - cabextract 0.2-2b
[21 Oct 2004] DSA-573-1 cupsys - integer overflows
	{CVE-2004-0888}
	[woody] - cupsys 1.1.14-5woody10
[21 Oct 2004] DSA-572-1 ecartis - multiple
	{CVE-2004-0913}
	[woody] - ecartis 0.129a+1.0.0-snap20020514-1.3
[20 Oct 2004] DSA-571-1 libpng3 - buffer overflows, integer overflow
	{CVE-2004-0599}
	[woody] - libpng3 1.2.1-1.1.woody.9
[20 Oct 2004] DSA-570-1 libpng - integer overflow
	{CVE-2004-0599}
	[woody] - libpng 1.0.12-3.woody.9
[18 Oct 2004] DSA-569-1 netkit-telnet-ssl - invalid free(3)
	{CVE-2004-0911}
	[woody] - netkit-telnet-ssl 0.17.17+0.1-2woody2
[16 Oct 2004] DSA-568-1 cyrus-sasl-mit - unsanitised input
	{CVE-2004-0884}
	[woody] - cyrus-sasl-mit 1.5.24-15woody3
[15 Oct 2004] DSA-567-1 tiff - heap overflows
	{CVE-2004-0803 CVE-2004-0804 CVE-2004-0886}
	[woody] - tiff 3.5.5-6woody1
[14 Oct 2004] DSA-566-1 cupsys - unsanitised input
	{CVE-2004-0923}
	[woody] - cupsys 1.1.14-5woody7
[13 Oct 2004] DSA-565-1 sox - buffer overflows
	{CVE-2004-0557}
	[woody] - sox 12.17.3-4woody2 (bug #262083)
[13 Oct 2004] DSA-564-1 mpg123 - missing user input sanitising
	{CVE-2004-0805}
	[woody]	- mpg123 0.59r-13woody3
[12 Oct 2004] DSA-563-3 cyrus-sasl - unsanitised input
	{CVE-2004-0884}
	[woody] - cyrus-sasl 1.5.27-3.1woody5 (bug #275432)
	NOTE: 563-1 and 563-2 had problems on sparc/arm and with sendmail
[11 Oct 2004] DSA-562-2 mysql - several vulnerabilities
	{CVE-2004-0835 CVE-2004-0836 CVE-2004-0837}
	[woody]	- mysql 3.23.49-8.8
[11 Oct 2004] DSA-561-1 xfree86 - integer and stack overflows
	{CVE-2004-0687 CVE-2004-0688}
	[woody] - xfree86 4.1.0-16woody4
[07 Oct 2004] DSA-600-1 samba - arbitrary file access
	{CVE-2004-0815}
	[woody] - samba 2.2.3a-14.1
[07 Oct 2004] DSA-560-1 lesstif1-1 - integer and stack overflows
	{CVE-2004-0687 CVE-2004-0688}
	[woody] - lesstif1-1 0.93.18-5
[06 Oct 2004] DSA-559-1 net-acct - insecure temporary file
	{CVE-2004-0851}
	[woody] - net-acct 0.71-5woody1
[06 Oct 2004] DSA-558-1 libapache-mod-dav - null pointer dereference
	{CVE-2004-0809}
	[woody] - libapache-mod-dav 1.0.3-3.1
[04 Oct 2004] DSA-557-1 pppoe - missing privilegue dropping
	{CVE-2004-0564}
	[woody] - rp-pppoe 3.3-1.2
[03 Oct 2004] DSA-556-1 netkit-telnet - invalid free(3)
	{CVE-2004-0911}
	[woody] - netkit-telnet 0.17-18woody2
[30 Sep 2004] DSA-555-1 freenet6 - file permissions
	{CVE-2004-0563}
	[woody] - freenet6 0.9.6-1woody2
[27 Sep 2004] DSA-554-1 sendmail - pre-set password
	{CVE-2004-0833}
	[woody] - sendmail 8.12.3-7.1
[27 Sep 2004] DSA-553-1 getmail - symlink vulnerability
	{CVE-2004-0880 CVE-2004-0881}
	[woody] - getmail 2.3.7-2
[22 Sep 2004] DSA-552-1 imlib2 - unsanitised input
	{CVE-2004-0802}
	[woody] - imlib2 1.0.5-2woody1
[21 Sep 2004] DSA-551-1 lukemftpd - incorrect internal variable handling
	{CVE-2004-0794}
	[woody] - lukemftpd 1.1-1woody2
[20 Sep 2004] DSA-550-1 wv - buffer overflow
	{CVE-2004-0645}
	[woody] - wv 0.7.1+rvt-2woody3 (bug #264972)
[17 Sep 2004] DSA-549-1 gtk+2.0 - multiple holes
	{CVE-2004-0782 CVE-2004-0783 CVE-2004-0788}
	[woody] - gtk+2.0 2.0.2-5woody2
[26 Oct 2005] DSA-548-2 imlib - unsanitised input
	{CVE-2004-0817}
	[woody] - imlib 1.9.14-2woody3
	[sarge] - imlib 1.9.14-16.2
	NOTE: Initial -1 fix was incomplete
[16 Sep 2004] DSA-547-1 imagemagick - buffer overflows
	{CVE-2004-0827}
	[woody] - imagemagick 5.4.4.5-1woody3
[16 Sep 2004] DSA-546-1 gdk-pixbuf - several vulnerabilities
	{CVE-2004-0753 CVE-2004-0782 CVE-2004-0788}
	[woody] - gdk-pixbuf 0.17.0-2woody2
[15 Sep 2004] DSA-545-1 cupsys - denial of service
	{CVE-2004-0558}
	[woody] - cupsys 1.1.14-5woody6
[14 Sep 2004] DSA-544-1 webmin - insecure temporary directory
	{CVE-2004-0559}
	[woody] - webmin 0.94-7woody3
[31 Aug 2004] DSA-543-1 krb5 -- several vulnerabilities
	{CVE-2004-0642 CVE-2004-0643 CVE-2004-0644 CVE-2004-0772}
	[woody] - krb5 1.2.4-5woody6
[31 Aug 2004] DSA-458-3 python2.2 - buffer overflow
	{CVE-2004-0150}
	[woody] - python2.2 2.2.1-4.6
	NOTE: Previous DSA had regressions
[30 Aug 2004] DSA-542-1 qt - unsanitised input
	{CVE-2004-0691 CVE-2004-0692 CVE-2004-0693}
	[woody] - qt-copy 3.0.3-20020329-1woody2
[25 Aug 2004] DSA-541 icecast-server - cross site scripting
	{CVE-2004-0781}
	[woody] - icecast-server 1:1.3.11-4.2
[18 Aug 2004] DSA-540 mysql-dfsg - insecure file creation
	{CVE-2004-0457}
	[woody] - mysql 3.23.49-8.7
[18 Aug 2004] DSA-539 kdelibs - denial of service
	{CVE-2004-0689}
	[woody] - kdelibs 4:2.2.2-13.woody.12
[17 Aug 2004] DSA-538 rsync - unauthorised directory traversal and file access
	{CVE-2004-0792}
	[woody] - rsync 2.5.5-0.6
[16 Aug 2004] DSA-537 ruby - insecure file permissions
	{CVE-2004-0755}
	[woody] - ruby 1.6.7-3woody3
[04 Aug 2004] DSA-536 libpng - several vulnerabilities
	{CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0768}
	[woody] - libpng 1.0.12-3.woody.7
	[woody] - libpng3 1.2.1-1.1.woody.7
[02 Aug 2004] DSA-535 squirrelmail - several vulnerabilities
	{CVE-2004-0519 CVE-2004-0520 CVE-2004-0521 CVE-2004-0639}
	[woody] - squirrelmail 1:1.2.6-1.4
[22 Jul 2004] DSA-534 mailreader - directory traversal
	{CVE-2002-1581}
	[woody] - mailreader 2.3.29-5woody1
[22 Jul 2004] DSA-533 courier - cross-site scripting
	{CVE-2004-0591}
	[woody] - courier 0.37.3-2.5
[22 Jul 2004] DSA-532 libapache-mod-ssl - several vulnerabilities
	{CVE-2004-0488 CVE-2004-0700}
	[woody] - libapache-mod-ssl 2.8.9-2.4
[20 Jul 2004] DSA-531 php4 - several vulnerabilities
	{CVE-2004-0594 CVE-2004-0595}
	[woody] - php4 4.1.2-7
[17 Jul 2004] DSA-530 l2tpd - buffer overflow
	{CVE-2004-0649}
	[woody] - l2tpd 0.67-1.2
[17 Jul 2004] DSA-529 netkit-telnet-ssl - format string
	{CVE-2004-0640}
	[woody] - netkit-telnet-ssl 0.17.17+0.1-2woody1
[17 Jul 2004] DSA-528 ethereal - denial of service
	{CVE-2004-0635}
	[woody] - ethereal 0.9.4-1woody8
[03 Jul 2004] DSA-527 pavuk - buffer overflow
	{CVE-2004-0456}
	NOTE: DSA is incorrect; pavuk is in sarge and unstable.
	[woody] - pavuk 0.9pl28-1woody1
[03 Jul 2004] DSA-526 webmin - several vulnerabilities
	{CVE-2004-0582 CVE-2004-0583}
	[woody] - webmin 0.94-7woody2
[24 Jun 2004] DSA-525 apache - buffer overflow
	{CVE-2004-0492}
	[woody] - apache 1.3.26-0woody5
[19 Jun 2004] DSA-524 rlpr - several vulnerabilities
	{CVE-2004-0393 CVE-2004-0454}
	[woody] - rlpr 2.02-7woody1
[19 Jun 2004] DSA-523 www-sql - buffer overflow
	{CVE-2004-0455}
	[woody] - www-sql 0.5.7-17woody1
[19 Jun 2004] DSA-522 super - format string vulnerability
	{CVE-2004-0579}
	[woody] - super 3.16.1-1.2
[18 Jun 2004] DSA-521 sup - format string vulnerability
	{CVE-2004-0451}
	[woody] - sup 1.8-8woody2
[16 Jun 2004] DSA-520 krb5 - buffer overflows
	{CVE-2004-0523}
	[woody] - krb5 1.2.4-5woody5
[15 Jun 2004] DSA-519 cvs - several vulnerabilities
	{CVE-2004-0416 CVE-2004-0417 CVE-2004-0418}
	[woody] - cvs 1.11.1p1debian-9woody7
[14 Jun 2004] DSA-518 kdelibs - unsanitised input
	{CVE-2004-0411}
	[woody] - kdelibs 4:2.2.2-13.woody.10
[10 Jun 2004] DSA-517 cvs - buffer overflow
	{CVE-2004-0414}
	[woody] - cvs 1.11.1p1debian-9woody6
[07 Jun 2004] DSA-516 postgresql - buffer overflow
	{CVE-2004-0547}
	[woody] - postgresql 7.2.1-2woody5
[05 Jun 2004] DSA-515 lha - several vulnerabilities
	{CVE-2004-0234 CVE-2004-0235}
	[woody] - lha 1.14i-2woody1
[04 Jun 2004] DSA-514 kernel-image-sparc-2.2 - failing function and TLB flush
	{CVE-2004-0077}
	[woody] - kernel-source-2.2.20 2.2.20-5woody3
[03 Jun 2004] DSA-513 log2mail - format string
	{CVE-2004-0450}
	[woody] - log2mail 0.2.5.2
[02 Jun 2004] DSA-512 gallery - unauthenticated access
	{CVE-2004-0522}
	[woody] - gallery 1.2.5-8woody2
[30 May 2004] DSA-511 ethereal - buffer overflows
	{CVE-2004-0176}
	[woody] - ethereal 0.9.4-1woody7
[29 May 2004] DSA-510 jftpgw - format string
	{CVE-2004-0448}
	[woody] - jftpgw 0.13.1-1woody1
[29 May 2004] DSA-509 gatos - privilege escalation
	{CVE-2004-0395}
	[woody] - gatos 0.0.5-6woody1
[22 May 2004] DSA-508 xpcd - buffer overflow
	{CVE-2004-0402}
	[woody] - xpcd 2.08-8woody2
[19 May 2004] DSA-507 cadaver - buffer overflow
	{CVE-2004-0398}
	[woody] - cadaver 0.18.0-1woody3
[19 May 2004] DSA-506 neon - buffer overflow
	{CVE-2004-0398}
	[woody] - neon 0.19.3-2woody5
[19 May 2004] DSA-505 cvs - heap overflow
	{CVE-2004-0396}
	[woody] - cvs 1.11.1p1debian-9woody4
[18 May 2004] DSA-504 heimdal - missing input sanitising
	{CVE-2004-0434}
	[woody] - heimdal 0.4e-7.woody.9
[13 May 2004] DSA-503 mah-jong - missing argument check
	{CVE-2004-0458}
	[woody] - mah-jong 1.4-3
[11 May 2004] DSA-502 exim-tls - buffer overflow
	{CVE-2004-0399 CVE-2004-0400}
	[woody] - exim-tls 3.35-3woody2
[07 May 2004] DSA-501 exim - buffer overflow
	{CVE-2004-0399 CVE-2004-0400}
	[woody] - exim 3.35-1woody3
[01 May 2004] DSA-500 flim - insecure temporary file
	{CVE-2004-0422}
	[woody] - flim 1.14.3-9woody1
[01 May 2004] DSA-499 rsync - directory traversal
	{CVE-2004-0426}
	[woody] - rsync 2.5.5-0.5
[30 Apr 2004] DSA-498 libpng - out of bound access
	{CVE-2004-0421}
	[woody] - libpng 1.0.12-3.woody.5 
	[woody] - libpng3 1.2.1-1.1.woody.5
[29 Apr 2004] DSA-497 mc - several vulnerabilities
	{CVE-2004-0226 CVE-2004-0231 CVE-2004-0232}
	[woody] - mc 4.5.55-1.2woody3
[29 Apr 2004] DSA-496 eterm - missing input sanitising
	{CVE-2003-0068}
	[woody] - eterm 0.9.2-0pre2002042903.3
[26 Apr 2004] DSA-495 linux-kernel-2.4.16-arm - several vulnerabilities
	{CVE-2003-0127 CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
	[woody] - kernel-source-2.4.16 2.4.16-1woody2
	[woody] - kernel-patch-2.4.16-arm 20040419
	[woody] - kernel-image-2.4.16-lart 20040419
	[woody] - kernel-image-2.4.16-netwinder 20040419
	[woody] - kernel-image-2.4.16-riscpc 20040419
[21 Apr 2004] DSA-494 ident2 - buffer overflow
	{CVE-2004-0408}
	[woody]	- ident2 1.03-3woody1
[21 Apr 2004] DSA-493 xchat - buffer overflow
	{CVE-2004-0409}
	[woody] - xchat 1.8.9-0woody3
[18 Apr 2004] DSA-492 iproute - denial of service
	{CVE-2003-0856}
	[woody] - iproute 20010824-8woody1
[17 Apr 2004] DSA-491 linux-kernel-2.4.19-mips - several vulnerabilities
	{CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
 	[woody] - kernel-source-2.4.19 2.4.19-4.woody2
	[woody] - kernel-patch-2.4.19-mips 2.4.19-0.020911.1.woody4
[17 Apr 2004] DSA-490 zope - arbitrary code execution
	{CVE-2002-0688}
	[woody]	- zope 2.5.1-1woody1
[17 Apr 2004] DSA-489 linux-kernel-2.4.17-mips+mipsel - several vulnerabilities
	{CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
 	[woody] - kernel-source-2.4.17 2.4.17-1woody3
	[woody] - kernel-patch-2.4.17-mips 2.4.17-0.020226.2.woody6
	[woody] - kernel-patch-2.4.17-mipsel 2.4.17-0.020226.2.woody6
[16 Apr 2004] DSA-488 logcheck - insecure temporary directory
	{CVE-2004-0404}
	[woody]	- logcheck 1.1.1-13.1woody1
[16 Apr 2004] DSA-487 neon - format string
	{CVE-2004-0179}
	[woody] - neon 0.19.3-2woody3
[16 Apr 2004] DSA-486 cvs - several vulnerabilities
	{CVE-2004-0180 CVE-2004-0405}
	[woody]	- cvs 1.11.1p1debian-9woody2
[14 Apr 2004] DSA-485 ssmtp - format string
	{CVE-2004-0156}
	[woody]	- ssmtp 2.50.6.1
[14 Apr 2004] DSA-484 xonix - failure to drop privileges
	{CVE-2004-0157}
	[woody]	- xonix 1.4-19woody1
[14 Apr 2004] DSA-483 mysql - insecure temporary file creation
	{CVE-2004-0381 CVE-2004-0388}
	[woody] - mysql 3.23.49-8.6
[14 Apr 2004] DSA-482 linux-kernel-2.4.17-apus+s390 - several vulnerabilities
	{CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
	[woody] - kernel-source-2.4.17 2.4.17-1woody3
	[woody] - kernel-patch-2.4.17-apus 2.4.17-5
	[woody] - kernel-patch-2.4.17-s390 2.4.17-2.woody.4
	[woody] - kernel-image-2.4.17-s390 2.4.17-2.woody.4
[14 Apr 2004] DSA-481 linux-kernel-2.4.17-ia64 - several vulnerabilities
	{CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
	[woody] - kernel-image-2.4.17-ia64 011226.17
[14 Apr 2004] DSA-480 linux-kernel-2.4.17+2.4.18-hppa - several vulnerabilities
	{CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
	[woody] - kernel-image-2.4.17-hppa 32.4
	[woody] - kernel-image-2.4.18-hppa 62.3
[14 Apr 2004] DSA-479 linux-kernel-2.4.18-alpha+i386+powerpc - several vulnerabilities
	{CVE-2004-0003 CVE-2004-0010 CVE-2004-0109 CVE-2004-0177 CVE-2004-0178}
	[woody] - kernel-source-2.4.18 2.4.18-14.3
	[woody] - kernel-image-2.4.18-1-alpha 2.4.18-15
	[woody] - kernel-image-2.4.18-1-i386 2.4.18-13
	[woody] - kernel-image-2.4.18-i386bf 2.4.18-5woody8
	[woody] - kernel-patch-2.4.18-powerpc 2.4.18-1woody5
[06 Apr 2004] DSA-478 tcpdump - denial of service
	{CVE-2004-0183 CVE-2004-0184}
	[woody] - tcpdump 3.6.2-2.8
[06 Apr 2004] DSA-477 xine-ui - insecure temporary file creation
	{CVE-2004-0372}
	[woody]	- xine-ui 0.9.8-5
[06 Apr 2004] DSA-476 heimdal - cross-realm
	{CVE-2004-0371}
	[woody]	- heimdal 0.4e-7.woody.8.1
[05 Apr 2004] DSA-475 linux-kernel-2.4.18-hppa - several vulnerabilities
	{CVE-2003-0961 CVE-2003-0985 CVE-2004-0077}
	[woody] - kernel-image-2.4.18-hppa 62.1
[03 Apr 2004] DSA-474 squid - ACL bypass
	{CVE-2004-0189}
	[woody] - squid 2.4.6-2woody2
[03 Apr 2004] DSA-473 oftpd - denial of service
	{CVE-2004-0376}
	[woody]	- oftpd 0.3.6-6
[03 Apr 2004] DSA-472 fte - several vulnerabilities
	{CVE-2003-0648}
	[woody] - fte 0.49.13-15woody1
[02 Apr 2004] DSA-471 interchange - missing input sanitising
	{CVE-2004-0374}
	[woody] - interchange 4.8.3.20020306-1.woody.2
[01 Apr 2004] DSA-470 linux-kernel-2.4.17-hppa - several vulnerabilities
	{CVE-2003-0961 CVE-2003-0985 CVE-2004-0077}
	[woody] - kernel-image-2.4.17-hppa 32.3
[29 Mar 2004] DSA-469 pam-pgsql - missing input sanitising
	{CVE-2004-0366}
	[woody] - pam-pgsql 0.5.2-3woody2
[24 Mar 2004] DSA-468 emil - several vulnerabilities
	{CVE-2004-0152 CVE-2004-0153}
	[woody] - emil 2.1.0-beta9-11woody1
[23 Mar 2004] DSA-467 ecartis - several vulnerabilities
	{CVE-2003-0781 CVE-2003-0782}
	[woody] - ecartis 0.129a+1.0.0-snap20020514-1.2
[18 Mar 2004] DSA-466 linux-kernel-2.2.10-powerpc-apus - failing function and TLB flush
	{CVE-2004-0077}
	[woody] - kernel-source-2.2.10 2.2.10-2
	[woody] - kernel-image-2.2.10-powerpc-apus 2.2.10-13woody1
[17 Mar 2004] DSA-465 openssl - several vulnerabilities
	{CVE-2004-0079 CVE-2004-0081}
	[woody] - openssl 0.9.6c-2.woody.6
	[woody] - openssl094 0.9.4-6.woody.4
	[woody] - openssl095 0.9.5a-6.woody.5
[16 Mar 2004] DSA-464 gdk-pixbuf - broken image handling
	{CVE-2004-0111}
	[woody] - gdk-pixbuf 0.17.0-2woody1
[12 Mar 2004] DSA-463 samba - privilege escalation
	{CVE-2004-0186}
	[woody] - samba 2.2.3a-13
[12 Mar 2004] DSA-462 xitalk - missing privilege release
	{CVE-2004-0151}
	[woody] - xitalk 1.1.11-9.1woody1
[11 Mar 2004] DSA-461 calife - buffer overflow
	{CVE-2004-0188}
	[woody] - calife 2.8.4c-1woody1
[10 Mar 2004] DSA-460 sysstat - insecure temporary file
	{CVE-2004-0108}
	[woody] - sysstat 5.0.1-1
[10 Mar 2004] DSA-459 kdelibs - cookie path traversal
	{CVE-2003-0592}
	[woody] - kdelibs 4:2.2.2-6woody3
	[woody] - kdelibs-crypto 4:2.2.2-13.woody.9
[08 Mar 2004] DSA-457 wu-ftpd - several vulnerabilities
	{CVE-2004-0148 CVE-2004-0185}
	[woody] - wu-ftpd 2.6.2-3woody4
[06 Mar 2004] DSA-456 linux-kernel-2.2.19-arm - failing function and TLB flush
	{CVE-2004-0077}
	[woody] - kernel-source-2.2.19 2.2.19.1-4woody1
	[woody] - kernel-patch-2.2.19-arm 20040303
	[woody] - kernel-image-2.2.19-netwinder 20040303
	[woody] - kernel-image-2.2.19-riscpc 20040303
[03 Mar 2004] DSA-455 libxml - buffer overflows
	{CVE-2004-0110}
	[woody] - libxml 1.8.17-2woody1 
	[woody] - libxml2 2.4.19-4woody1
[02 Mar 2004] DSA-454 linux-kernel-2.2.22-alpha - failing function and TLB flush
	{CVE-2004-0077}
	[woody] - kernel-source-2.2.22 2.2.22-1woody1
	[woody] - kernel-image-2.2.22-alpha 2.2.22-2
[02 Mar 2004] DSA-453 linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush
	{CVE-2004-0077}
        [woody] - kernel-source-2.2.20 2.2.20-5woody3
        [woody] - kernel-image-2.2.20-i386 2.2.20-5woody5
        [woody] - kernel-image-2.2.20-reiserfs-i386 2.2.20-4woody1
        [woody] - kernel-image-2.2.20-amiga 2.20-4
        [woody] - kernel-image-2.2.20-atari 2.2.20-3
        [woody] - kernel-image-2.2.20-bvme6000 2.2.20-3
        [woody] - kernel-image-2.2.20-mac 2.2.20-3
        [woody] - kernel-image-2.2.20-mvme147 2.2.20-3
        [woody] - kernel-image-2.2.20-mvme16x 2.2.20-3
        [woody] - kernel-patch-2.2.20-powerpc 2.2.20-3woody1
[29 Feb 2004] DSA-452 libapache-mod-python - denial of service
	{CVE-2003-0973}
	[woody] - libapache-mod-python 2:2.7.8-0.0woody2
[27 Feb 2004] DSA-451 xboing - buffer overflows
	{CVE-2004-0149}
	[woody] - xboing 2.4-26woody1
[27 Feb 2004] DSA-450 linux-kernel-2.4.19-mips - several vulnerabilities
	{CVE-2003-0961 CVE-2003-0985 CVE-2004-0077}
	[woody] - kernel-source-2.4.19 2.4.19-0.020911.1.woody3
	[woody] - kernel-patch-2.4.19-mips 2.4.19-4.woody1
[24 Feb 2004] DSA-449 metamail - buffer overflow, format string bugs
	{CVE-2004-0104 CVE-2004-0105}
	[woody] - metamail 2.7-45woody.2
[22 Feb 2004] DSA-448 pwlib - several vulnerabilities
	{CVE-2004-0097}
	[woody] - pwlib 1.2.5-5woody1
[22 Feb 2004] DSA-447 hsftp - format string
	{CVE-2004-0159}
	[woody] - hsftp 1.11-1woody1
[21 Feb 2004] DSA-446 synaesthesia - insecure file creation
	{CVE-2004-0160}
	[woody] - synaesthesia 2.1-2.1woody1
[21 Feb 2004] DSA-445 lbreakout2 - buffer overflow
	{CVE-2004-0158}
	[woody] - lbreakout2 2.2.2-1woody1
[20 Feb 2004] DSA-444 linux-kernel-2.4.17-ia64 - missing function return value check
	{CVE-2004-0077}
	[woody] - kernel-image-2.4.17-ia64 011226.16
[19 Feb 2004] DSA-443 xfree86 - several vulnerabilities
	{CVE-2003-0690 CVE-2004-0083 CVE-2004-0084 CVE-2004-0106 CVE-2004-0093 CVE-2004-0094}
	[woody] - xfree86 4.1.0-16woody3
[19 Feb 2004] DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities
	{CVE-2003-0001 CVE-2003-0244 CVE-2003-0246 CVE-2003-0247 CVE-2003-0248 CVE-2003-0364 CVE-2003-0961 CVE-2003-0985 CVE-2004-0077 CVE-2002-0429}
	[woody] - kernel-patch-2.4.17-s390 0.0.20020816-0.woody.2
	[woody] - kernel-image-2.4.17-s390 2.4.17-2.woody.3
[18 Feb 2004] DSA-441 linux-kernel-2.4.17-mips+mipsel - missing function return value check
	{CVE-2004-0077}
	[woody] - kernel-patch-2.4.17-mips 2.4.17-0.020226.2.woody5 
[18 Feb 2004] DSA-440 linux-kernel-2.4.17-powerpc-apus - several vulnerabilities
	{CVE-2003-0961 CVE-2003-0985 CVE-2004-0077}
 	[woody] - kernel-source-2.4.17 2.4.17-4
	[woody] - kernel-patch-2.4.17-apus 2.4.17-4
[18 Feb 2004] DSA-439 linux-kernel-2.4.16-arm - several vulnerabilities
	{CVE-2003-0961 CVE-2003-0985 CVE-2004-0077}
	[woody] - kernel-image-2.4.16-lart 2.4.16-20040204
	[woody] - kernel-image-2.4.16-netwinder 2.4.16-20040204
	[woody] - kernel-image-2.4.16-riscpc 2.4.16-20040204
	[woody] - kernel-patch-2.4.16-arm 20040204
[18 Feb 2004] DSA-438 linux-kernel-2.4.18-alpha+i386+powerpc - missing function return value check
	{CVE-2004-0077}
	[woody] - kernel-source-2.4.18 2.4.18-14.2
	[woody] - kernel-image-2.4.18-1-alpha 2.4.18-14
	[woody] - kernel-image-2.4.18-1-i386 2.4.18-12.2
	[woody] - kernel-image-2.4.18-i386bf 2.4.18-5woody7
	[woody] - kernel-patch-2.4.18-powerpc 2.4.18-1woody4
[11 Feb 2004] DSA-437 cgiemail - open mail relay
	{CVE-2002-1575}
	[woody] - cgiemail 1.6-14woody1
[08 Feb 2004] DSA-436 mailman - several vulnerabilities
	{CVE-2003-0991 CVE-2003-0965 CVE-2003-0038}
	[woody]	- mailman 2.0.11-1woody7
[06 Feb 2004] DSA-435 mpg123 - heap overflow
	{CVE-2003-0865}
	[woody]	- mpg123 0.59r-13woody2
[05 Feb 2004] DSA-434 gaim - several vulnerabilities
	{CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008}
	[woody] - gaim 0.58-2.4
[04 Feb 2004] DSA-433 kernel-patch-2.4.17-mips - integer overflow
	{CVE-2003-0961}
	[woody] - kernel-patch-2.4.17-mips 2.4.17-0.020226.2.woody4
[03 Feb 2004] DSA-432 crawl - buffer overflow
	{CVE-2004-0103}
	[woody] - crawl 4.0.0beta23-2woody1
[01 Feb 2004] DSA-431 perl - information leak
	{CVE-2003-0618}
	[woody] - perl 5.6.1-8.6
[28 Jan 2004] DSA-430 trr19 - missing privilege release
	{CVE-2004-0047}
	[woody] - trr19 1.0beta5-15woody1
[26 Jan 2004] DSA-429 gnupg - cryptographic weakness
	{CVE-2003-0971}
	[woody] - gnupg 1.0.6-4woody1
[20 Jan 2004] DSA-428 slocate - buffer overflow
	{CVE-2003-0848}
	[woody] - slocate 2.6-1.3.2
[19 Jan 2004] DSA-427 linux-kernel-2.4.17-mips+mipsel - missing boundary check
	{CVE-2003-0985}
	[woody] - kernel-patch-2.4.17-mips 2.4.17-0.020226.2.woody3
[18 Jan 2004] DSA-426 netpbm-free - insecure temporary files
	{CVE-2003-0924}
	[woody] - netpbm-free 2:9.20-8.4
[16 Jan 2004] DSA-425 tcpdump - multiple vulnerabilities
	{CVE-2003-1029 CVE-2003-0989 CVE-2004-0055 CVE-2004-0057}
	[woody] - tcpdump 3.6.2-2.7
[16 Jan 2004] DSA-424 mc - buffer overflow
	{CVE-2003-1023}
	[woody]	- mc 4.5.55-1.2woody2
[15 Jan 2004] DSA-423 linux-kernel-2.4.17-ia64 - several vulnerabilities
	{CVE-2003-0001 CVE-2003-0018 CVE-2003-0127 CVE-2003-0461 CVE-2003-0462 CVE-2003-0476 CVE-2003-0501 CVE-2003-0550 CVE-2003-0551 CVE-2003-0552 CVE-2003-0961 CVE-2003-0985}
	[woody] - kernel-image-2.4.17-ia64 kernel-image-2.4.17-ia64
[13 Jan 2004] DSA-422 cvs - remote vulnerability
	[woody]	- cvs 1.11.11
[12 Jan 2004] DSA-421 mod-auth-shadow - password expiration
	{CVE-2004-0041}
	[woody]	- mod-auth-shadow 1.3-3.1woody.1
[12 Jan 2004] DSA-420 jitterbug - improperly sanitised input
	{CVE-2004-0028}
	[woody] - jitterbug 1.6.2-4.2woody2
[09 Jan 2004] DSA-419 phpgroupware - missing filename sanitising, SQL injection
	{CVE-2004-0016 CVE-2004-0017}
	[woody] - phpgroupware 0.9.14-0.RC3.2.woody3
[07 Jan 2004] DSA-418 vbox3 - privilege leak
	{CVE-2004-0015}
	[woody] - vbox3 0.1.7.1
[07 Jan 2004] DSA-417 linux-kernel-2.4.18-powerpc+alpha - missing boundary check
	{CVE-2003-0961 CVE-2003-0985}
	[woody] - kernel-patch-2.4.18-powerpc 2.4.18-1woody3
	[woody] - kernel-image-2.4.18-1-alpha 2.4.18-12
[06 Jan 2004] DSA-416 fsp - buffer overflow, directory traversal
	{CVE-2003-1022 CVE-2004-0011}
	[woody]	- fsp 2.81.b3-3.1woody1
[06 Jan 2004] DSA-415 zebra - denial of service
	{CVE-2003-0795 CVE-2003-0858}
	[woody] - zebra 0.92a-5woody2
[06 Jan 2004] DSA-414 jabber - denial of service
	{CVE-2004-0013}
	[woody] - jabber 1.4.2a-1.1woody1
[06 Jan 2004] DSA-413 linux-kernel-2.4.18 - missing boundary check
	{CVE-2003-0985}
 	[woody] - kernel-source-2.4.18 2.4.18-14.1
	[woody] - kernel-image-2.4.18-1-i386 2.4.18-12.1
[05 Jan 2004] DSA-412 nd - buffer overflows
	{CVE-2004-0014}
	[woody]	- nd 0.5.0-1woody1
[05 Jan 2004] DSA-411 mpg321 - format string vulnerability
	{CVE-2003-0969}
	[woody]	- mpg321 0.2.10.2
[05 Jan 2004] DSA-410 libnids - buffer overflow
	{CVE-2003-0850}
	[woody] - libnids 1.16-3woody1
[05 Jan 2004] DSA-409 bind - denial of service
	{CVE-2003-0914}
	[woody]	- bind 1:8.3.3-2.0woody2
[05 Jan 2004] DSA-408 screen - integer overflow
	{CVE-2003-0972}
	[woody] - screen 3.9.11-5woody1
[05 Jan 2004] DSA-407 ethereal - buffer overflows
	{CVE-2003-0925 CVE-2003-0926 CVE-2003-0927 CVE-2003-1012 CVE-2003-1013}
	[woody] - ethereal 0.9.4-1woody6
[05 Jan 2004] DSA-406 lftp - buffer overflow 
	{CVE-2003-0963}
	[woody] - lftp 2.4.9-1woody2
[30 Dec 2003] DSA-405 xsok - missing privilege release
	{CVE-2003-0949}
	[woody]	- xsok 1.02-9woody2
[04 Dec 2003] DSA-404 rsync - heap overflow
	{CVE-2003-0962}
	[woody] - rsync 2.5.5-0.2
[01 Dec 2003] DSA-403 kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit
	{CVE-2003-0961}
	[woody] - kernel-image-2.4.18-1-alpha 2.4.18-11
	[woody] - kernel-image-2.4.18-1-i386 2.4.18-12
	[woody] - kernel-source-2.4.18 2.4.18-14
[17 Nov 2003] DSA-402 minimalist - unsanitised input
	{CVE-2003-0902}
	[woody] - minimalist 2.2-4
[17 Nov 2003] DSA-401 hylafax - format strings
	{CVE-2003-0886}
	[woody] - hylafax 4.1.1-1.3
[11 Nov 2003] DSA-400 omega-rpg - buffer overflow
	{CVE-2003-0932}
	[woody]	- omega-rpg 0.90-pa9-7woody1
[10 Nov 2003] DSA-399 epic4 - buffer overflow
	{CVE-2003-0328}
	[woody]	- epic4 1.1.2.20020219-2.2
[10 Nov 2003] DSA-398 conquest - buffer overflow
	{CVE-2003-0933}
	[woody] - conquest 7.1.1-6woody1
[07 Nov 2003] DSA-397 postgresql - buffer overflow
	{CVE-2003-0901}
	[woody] - postgresql 7.2.1-2woody4
[29 Oct 2003] DSA-396 thttpd - missing input sanitizing, wrong calculation
	{CVE-2002-1562 CVE-2003-0899}
	[woody] - thttpd 2.21b-11.2
[15 Oct 2003] DSA-395 tomcat4 - incorrect input handling
	{CVE-2003-0866}
	[woody] - tomcat4 4.0.3-3woody3
[11 Oct 2003] DSA-394 openssl095 - ASN.1 parsing vulnerability
	{CVE-2003-0543 CVE-2003-0544 CVE-2003-0545}
	[woody] - openssl095 0.9.5a-6.woody.3
[01 Oct 2003] DSA-393 openssl - denial of service
	{CVE-2003-0543 CVE-2003-0544 CVE-2003-0545}
	[woody] - openssl 0.9.6c-2.woody.4
[29 Sep 2003] DSA-392 webfs - buffer overflows, file and directory exposure
	{CVE-2003-0832 CVE-2003-0833}
	[woody] - webfs 1.17.2
[28 Sep 2003] DSA-391 freesweep - buffer overflow
	{CVE-2003-0828}
	[woody] - freesweep 0.88-4woody1
[26 Sep 2003] DSA-390 marbles - buffer overflow
	{CVE-2003-0830}
	[woody] - marbles 1.0.2-1woody1
[20 Sep 2003] DSA-389 ipmasq - insecure packet filtering rules
	{CVE-2003-0785}
	[woody] - ipmasq 3.5.10c
[19 Sep 2003] DSA-388 kdebase - several vulnerabilities
	{CVE-2003-0690 CVE-2003-0692}
	[woody] - kdebase 4:2.2.2-14.7
[18 Sep 2003] DSA-387 gopher - buffer overflows
	{CVE-2003-0805}
	[woody] - gopher 3.0.3woody1
[18 Sep 2003] DSA-386 libmailtools-perl - input validation bug
	{CVE-2002-1271}
	[woody] - libmailtools-perl 1.44-1woody1
[18 Sep 2003] DSA-385 hztty - buffer overflows
	{CVE-2003-0783}
	[woody] - hztty 2.0-5.2woody1
[17 Sep 2003] DSA-384 sendmail - buffer overflows
	{CVE-2003-0681 CVE-2003-0694}
	[woody] - sendmail 8.12.3-6.6
	[woody] - sendmail-wide 8.12.3+3.5Wbeta-5.5
[17 Sep 2003] DSA-383 ssh-krb5 - possible remote vulnerability
	{CVE-2003-0693 CVE-2003-0695 CVE-2003-0682}
	[woody] - openssh-krb5 3.4p1-0woody4
[16 Sep 2003] DSA-382 ssh - possible remote vulnerability
	{CVE-2003-0693 CVE-2003-0695 CVE-2003-0682}
	[woody] - openssh 1:3.4p1-1.woody.3
[13 Sep 2003] DSA-381 mysql - buffer overflow
	{CVE-2003-0780}
	[woody] - mysql 3.23.49-8.5
[12 Sep 2003] DSA-380 xfree86 - buffer overflows, denial of service
	{CVE-2003-0063 CVE-2003-0071 CVE-2002-0164 CVE-2003-0730}
	[woody] - xfree86 4.1.0-16woody1
[11 Sep 2003] DSA-379 sane-backends - several vulnerabilities
	{CVE-2003-0773 CVE-2003-0774 CVE-2003-0775 CVE-2003-0776 CVE-2003-0777 CVE-2003-0778}
	[woody] - sane-backends 1.0.7-4
[07 Sep 2003] DSA-378 mah-jong - buffer overflows, denial of service
	{CVE-2003-0705 CVE-2003-0706}
	[woody] - mah-jong 1.4-2
[04 Sep 2003] DSA-377 wu-ftpd - insecure program execution
	{CVE-1999-0997}
	[woody] - wu-ftpd 2.6.2-3woody2
[04 Sep 2003] DSA-376 exim - buffer overflow
	{CVE-2003-0743}
	[woody] - exim 3.35-1woody2
	[woody] - exim-tls 3.35-3woody1
[29 Aug 2003] DSA-375 node - buffer overflow, format string
	{CVE-2003-0707 CVE-2003-0708}
	[woody] - node 0.3.0a-2woody1
[26 Aug 2003] DSA-374 libpam-smb - buffer overflow
	{CVE-2003-0686}
	[woody] - libpam-smb 1.1.6-1.1woody1
[16 Aug 2003] DSA-373 autorespond - buffer overflow
	{CVE-2003-0654}
	[woody] - autorespond 2.0.2-2woody1
[16 Aug 2003] DSA-372 netris - buffer overflow
	{CVE-2003-0685}
	[woody] - netris 0.5-4woody1
[11 Aug 2003] DSA-371 perl - cross-site scripting
	{CVE-2003-0615}
	[woody] - perl 5.6.1-8.3
[08 Aug 2003] DSA-370 pam-pgsql - format string
	{CVE-2003-0672}
	[woody] - pam-pgsql 0.5.2-3woody1
[08 Aug 2003] DSA-369 zblast - buffer overflow
	{CVE-2003-0613}
	[woody] - zblast 1.2pre-5woody2
[08 Aug 2003] DSA-368 xpcd - buffer overflow
	{CVE-2003-0649}
	[woody] - xpcd 2.08-8woody1
[08 Aug 2003] DSA-367 xtokkaetama - buffer overflow
	{CVE-2003-0652}
	[woody] - xtokkaetama 1.0b-6woody2
[05 Aug 2003] DSA-366 eroaster - insecure temporary file
	{CVE-2003-0656}
	[woody] - eroaster 2.1.0.0.3-2woody1
[05 Aug 2003] DSA-365 phpgroupware - several vulnerabilities
	{CVE-2003-0504 CVE-2003-0599 CVE-2003-0657}
	[woody] - phpgroupware 0.9.14-0.RC3.2.woody2
[04 Aug 2003] DSA-364 man-db - buffer overflows, arbitrary command execution
	{CVE-2003-0620 CVE-2003-0645}
	[woody] - man-db 2.3.20-18.woody.4
[03 Aug 2003] DSA-363 postfix - denial of service, bounce-scanning
	{CVE-2003-0468 CVE-2003-0540}
	[woody] - postfix 1.1.11-0.woody3
[02 Aug 2003] DSA-362 mindi - insecure temporary file
	{CVE-2003-0617}
	[woody] - mindi 0.58.r5-1woody1
[01 Aug 2003] DSA-361 kdelibs, kdelibs-crypto - several vulnerabilities
	{CVE-2003-0459 CVE-2003-0370}
	[woody] - kdelibs 4:2.2.2-13.woody.8
	[woody] - kdelibs-crypto 4:2.2.2-6woody2
[01 Aug 2003] DSA-360 xfstt - several vulnerabilities
	{CVE-2003-0581 CVE-2003-0625}
	[woody] - xfstt 1.2.1-3
[31 Jul 2003] DSA-359 atari800 - buffer overflows
	{CVE-2003-0630}
	[woody] - atari800 1.2.2-1woody2
[31 Jul 2003] DSA-358 linux-kernel-2.4.18 - several vulnerabilities
	{CVE-2003-0461 CVE-2003-0462 CVE-2003-0476 CVE-2003-0501 CVE-2003-0550 CVE-2003-0551 CVE-2003-0552 CVE-2003-0018 CVE-2003-0619 CVE-2003-0643}
	[woody] - kernel-source-2.4.18 2.4.18-13
	[woody] - kernel-image-2.4.18-1-i386 2.4.18-11
	[woody] - kernel-image-2.4.18-i386bf 2.4.18-5woody4
	[woody] - kernel-source-2.4.18 2.4.18-13
	[woody] - kernel-image-2.4.18-1-alpha 2.4.18-10.
[31 Jul 2003] DSA-357 wu-ftpd - remote root exploit
	{CVE-2003-0466}
	[woody] - wu-ftpd 2.6.2-3woody1
[30 Jul 2003] DSA-356 xtokkaetama - buffer overflows
	{CVE-2003-0611}
	[woody] - xtokkaetama 1.0b-6woody1
[30 Jul 2003] DSA-355 gallery - cross-site scripting
	{CVE-2003-0614}
	[woody] - gallery 1.2.5-8woody1
[29 Jul 2003] DSA-354 xconq - buffer overflows
	{CVE-2003-0607}
	[woody] - xconq 7.4.1-2woody2
[29 Jul 2003] DSA-353 sup - insecure temporary file
	{CVE-2003-0606}
	[woody] - sup 1.8-8woody1
[22 Jul 2003] DSA-352 fdclone - insecure temporary directory
	{CVE-2003-0596}
	[woody] - fdclone 2.00a-1woody3
[16 Jul 2003] DSA-351 php4 - cross-site scripting
	{CVE-2003-0442}
	[woody] - php4 4:4.1.2-6woody3
[15 Jul 2003] DSA-350 falconseye - buffer overflow
	{CVE-2003-0358}
	[woody] - falconseye 1.9.3-7woody3
[14 Jul 2003] DSA-349 nfs-utils - buffer overflow
	{CVE-2003-0252}
	[woody] - nfs-utils 1:1.0-2woody1
[11 Jul 2003] DSA-348 traceroute-nanog - integer overflow, buffer overflow
	{CVE-2003-0453}
	[woody] - traceroute-nanog 6.1.1-1.3
[08 Jul 2003] DSA-347 teapop - SQL injection
	{CVE-2003-0515}
	[woody] - teapop 0.3.4-1woody2
[08 Jul 2003] DSA-346 phpsysinfo - directory traversal
	{CVE-2003-0536}
	[woody] - phpsysinfo 2.0-3woody1 
[08 Jul 2003] DSA-345 xbl - buffer overflow
	{CVE-2003-0535}
	[woody] - xbl 1.0k-3woody2
[08 Jul 2003] DSA-344 unzip - directory traversal
	{CVE-2003-0282}
	[woody] - unzip 5.50-1woody2
[08 Jul 2003] DSA-343 skk, ddskk - insecure temporary file
	{CVE-2003-0539}
	[woody] - skk 10.62a-4woody1
	[woody] - ddskk 11.6.rel.0-2woody1
[07 Jul 2003] DSA-342 mozart - unsafe mailcap configuration
	{CVE-2003-0538}
	[woody] - mozart 1.2.3.20011204-3woody1
[07 Jul 2003] DSA-341 liece - insecure temporary file
	{CVE-2003-0537}
	[woody] - liece 2.0+0.20020217cvs-2.1
[06 Jul 2003] DSA-340 x-face-el - insecure temporary file
	[woody] - x-face-el 1.3.6.19-1woody1
[06 Jul 2003] DSA-339 semi - insecure temporary file
	{CVE-2003-0440}
	[woody] - semi 1.14.3.cvs.2001.08.10-1woody2
	[woody] - wemi 1.14.0.20010802wemiko-1.3
[29 Jun 2003] DSA-338 proftpd - SQL injection
	{CVE-2003-0500}
	[woody] - proftpd 1.2.4+1.2.5rc1-5woody2
[29 Jun 2003] DSA-337 gtksee - buffer overflow
	{CVE-2003-0444}
	[woody] - gtksee 0.5.0-6
[29 Jun 2003] DSA-336 linux-kernel-2.2.20 - several vulnerabilities
	{CVE-2002-1380 CVE-2002-0429 CVE-2003-0001 CVE-2003-0127 CVE-2003-0364 CVE-2003-0246 CVE-2003-0244 CVE-2003-0247 CVE-2003-0248}
	[woody] - kernel-source-2.2.20 2.2.20-5woody2
	[woody] - kernel-image-2.2.20-i386 2.2.20-5woody3
[28 Jun 2003] DSA-335 mantis - incorrect permissions
	{CVE-2003-0499}
	[woody] - mantis 0.17.1-3
[28 Jun 2003] DSA-334 xgalaga - buffer overflows
	{CVE-2003-0454}
	[woody] - xgalaga 2.0.34-19woody1
[27 Jun 2003] DSA-333 acm - integer overflow
	{CVE-2002-0391}
	[woody] - acm 5.0-3.woody.1
[27 Jun 2003] DSA-332 linux-kernel-2.4.17 - several vulnerabilities
	{CVE-2002-0429 CVE-2003-0001 CVE-2003-0127 CVE-2003-0244 CVE-2003-0246 CVE-2003-0247 CVE-2003-0248 CVE-2003-0364}
	[woody] - kernel-source-2.4.17 2.4.17-1woody1
	[woody] - kernel-patch-2.4.17-mips 2.4.17-0.020226.2.woody2
[27 Jun 2003] DSA-331 imagemagick - insecure temporary file
	{CVE-2003-0455}
	[woody] - imagemagick 4:5.4.4.5-1woody1
[23 Jun 2003] DSA-330 tcptraceroute - failure to drop root privileges
	{CVE-2003-0489}
	[woody] - tcptraceroute 1.2-2
[20 Jun 2003] DSA-329 osh - buffer overflows
	{CVE-2003-0452}
	[woody] - osh 1.7-11woody1
[19 Jun 2003] DSA-328 webfs - buffer overflow
	{CVE-2003-0445}
	[woody] - webfs 1.17.1
[19 Jun 2003] DSA-327 xbl - buffer overflows
	{CVE-2003-0451}
	[woody] - xbl 1.0k-3woody1
[19 Jun 2003] DSA-326 orville-write - buffer overflows
	{CVE-2003-0441}
	[woody] - orville-write 2.53-4woody1
[19 Jun 2003] DSA-325 eldav - insecure temporary file
	{CVE-2003-0438}
	[woody] - eldav 0.0.20020411-1woody1
[18 Jun 2003] DSA-324 ethereal - several vulnerabilities
	{CVE-2003-0428 CVE-2003-0429 CVE-2003-0431 CVE-2003-0432}
	[woody] - ethereal 0.9.4-1woody5
[16 Jun 2003] DSA-323 noweb - insecure temporary files
	{CVE-2003-0381}
	[woody] - noweb 2.9a-7.3
[16 Jun 2003] DSA-322 typespeed - buffer overflow
	{CVE-2003-0435}
	[woody] - typespeed 0.4.1-2.2
[13 Jun 2003] DSA-321 radiusd-cistron - buffer overflow
	{CVE-2003-0450}
	[woody] - radiusd-cistron 1.6.6-1woody1
[13 Jun 2003] DSA-320 mikmod - buffer overflow
	{CVE-2003-0427}
	[woody] - mikmod 3.1.6-4woody3
[12 Jun 2003] DSA-319 webmin - session ID spoofing
	{CVE-2003-0101}
	[woody] - webmin 0.94-7woody1
[12 Jun 2003] DSA-318 lyskom-server - denial of service
	{CVE-2003-0366}
	[woody] - lyskom-server 2.0.6-1woody1
[11 Jun 2003] DSA-317 cupsys - denial of service
	{CVE-2003-0195}
	[woody] - cupsys 1.1.14-5
[11 Jun 2003] DSA-316 nethack - buffer overflow, incorrect permissions
	{CVE-2003-0358 CVE-2003-0359}
	[woody] - nethack 3.4.0-3.0woody3
	[woody] - slashem 0.0.6E4F8-4.0woody3
[11 Jun 2003] DSA-315 gnocatan - buffer overflows, denial of service
	{CVE-2003-0433}
	[woody] - gnocatan 0.6.1-5woody2
[11 Jun 2003] DSA-314 atftp - buffer overflow
	{CVE-2003-0380}
	[woody] - atftp 0.6.1.1.0woody1
[11 Jun 2003] DSA-313 ethereal - buffer overflows, integer overflows
	{CVE-2003-0356 CVE-2003-0357}
	[woody] - ethereal 0.9.4-1woody4
[09 Jun 2003] DSA-312 kernel-patch-2.4.18-powerpc - several vulnerabilities
	{CVE-2002-0429 CVE-2003-0001 CVE-2003-0127 CVE-2003-0244 CVE-2003-0246 CVE-2003-0247 CVE-2003-0248}
	[woody] - kernel-patch-2.4.18-powerpc 2.4.18-1woody1
[08 Jun 2003] DSA-311 linux-kernel-2.4.18 - several vulnerabilities
	{CVE-2002-0429 CVE-2003-0001 CVE-2003-0127 CVE-2003-0244 CVE-2003-0246 CVE-2003-0247 CVE-2003-0248 CVE-2003-0364}
	[woody] - kernel-source-2.4.18 2.4.18-9
	[woody] - kernel-image-2.4.18-1-i386 2.4.18-8
	[woody] - kernel-image-2.4.18-i386bf 2.4.18-5woody1.
[08 Jun 2003] DSA-310 xaos - improper setuid-root execution
	{CVE-2003-0385}
	[woody] - xaos 3.0-23woody1
[06 Jun 2003] DSA-309 eterm - buffer overflow
	{CVE-2003-0382}
	[woody] - eterm 0.9.2-0pre2002042903.1
[06 Jun 2003] DSA-308 gzip - insecure temporary files
	{CVE-1999-1332 CVE-2003-0367}
	[woody] - gzip 1.3.2-3woody1
[27 May 2003] DSA-307 gps - multiple vulnerabilities
	{CVE-2003-0361 CVE-2003-0360 CVE-2003-0362}
	[woody] - gps  0.9.4-1woody1
[19 May 2003] DSA-306 ircii-pana - buffer overflows, integer overflow
	{CVE-2003-0321 CVE-2003-0322 CVE-2003-0328}
	[woody] - ircii-pana 1.0-0c19-1.1
[15 May 2003] DSA-305 sendmail - insecure temporary files
	{CVE-2003-0308}
	[woody] - sendmail 8.12.3-6.4
[15 May 2003] DSA-304 lv - privilege escalation
	{CVE-2003-0188}
	[woody] - lv 4.49.4-7woody2
[15 May 2003] DSA-303 mysql - privilege escalation
	{CVE-2003-0073}
	[woody] - mysql 3.23.49-8.4
[07 May 2003] DSA-302 fuzz - privilege escalation
	{CVE-2003-0261}
	[woody] - fuzz 0.6-6woody1
[07 May 2003] DSA-301 libgtop - buffer overflow
	{CVE-2001-0928}
	[woody] - libgtop 1.0.13-3.1
[06 May 2003] DSA-300 balsa - buffer overflow
	{CVE-2003-0167}
	[woody] - balsa 1.2.4-2.2
[06 May 2003] DSA-299 leksbot - improper setuid-root execution
	{CVE-2003-0262}
	[woody] - leksbot 1.2-3.1
[02 May 2003] DSA-298 epic4 - buffer overflows
	{CVE-2003-0323}
	[woody] - epic4 1.1.2.20020219-2.1
[01 May 2003] DSA-297 snort - integer overflow, buffer overflow
	{CVE-2003-0033 CVE-2003-0209}
	[woody] - snort 1.8.4beta1-3.1
[30 Apr 2003] DSA-296 kdebase - insecure execution
	{CVE-2003-0204}
	[woody] - kdebase 2.2.2-14.4
[30 Apr 2003] DSA-295 pptpd - buffer overflow
	{CVE-2003-0213}
	[woody] - pptpd 1.1.2-1.4
[23 Apr 2003] DSA-294 gkrellm-newsticker - missing quoting, incomplete parser
	{CVE-2003-0205 CVE-2003-0206}
	[woody] - gkrellm-newsticker 0.3-3.1
[23 Apr 2003] DSA-293 kdelibs - insecure execution
	{CVE-2003-0204}
	[woody] - kdebase 4:2.2.2-13.woody.7
[22 Apr 2003] DSA-292 mime-support - insecure temporary file creation
	{CVE-2003-0214}
	[woody] - mime-support 3.18-1.3
[22 Apr 2003] DSA-291 ircii - buffer overflows
	{CVE-2003-0323}
	[woody] - ircii 20020322-1.1
[17 Apr 2003] DSA-290 sendmail-wide - char-to-int conversion
	{CVE-2003-0161}
	[woody] - sendmail-wide 8.12.3+3.5Wbeta-5.4
[17 Apr 2003] DSA-289 rinetd - incorrect memory resizing
	{CVE-2003-0212}
	[woody] - rinetd 0.61-1.1
[17 Apr 2003] DSA-288 openssl - several vulnerabilities
	{CVE-2003-0147 CVE-2003-0131}
	[woody] - openssl 0.9.6c-2.woody.3
[15 Apr 2003] DSA-287 epic - buffer overflows
	{CVE-2003-0324}
	[woody] - epic 3.004-17.1
[14 Apr 2003] DSA-286 gs-common - insecure temporary file
	{CVE-2003-0207}
	[woody] - gs-common 0.3.3.0woody1
[14 Apr 2003] DSA-285 lprng - insecure temporary file
	{CVE-2003-0136}
	[woody] - lprng 3.8.10-1.2
[12 Apr 2003] DSA-284 kdegraphics - insecure execution
	{CVE-2003-0204}
	[woody] - kdegraphics 3.8.10-1.2
[11 Apr 2003] DSA-283 xfsdump - insecure file creation
	{CVE-2003-0173}
	[woody] - xfsdump 2.0.1-2
[09 Apr 2003] DSA-282 glibc - integer overflow
	{CVE-2003-0028}
	[woody] - glibc 2.2.5-11.5
[08 Apr 2003] DSA-281 moxftp - buffer overflow
	{CVE-2003-0203}
	[woody] - moxftp 2.2-18.1
[07 Apr 2003] DSA-280 samba - buffer overflow
	{CVE-2003-0201 CVE-2003-0196}
	[woody] - samba 2.2.3a-12.3
[07 Apr 2003] DSA-279 metrics - insecure temporary file creation
	{CVE-2003-0202}
	NOTE: Potato-only vulnerability, package was removed from woody.
[04 Apr 2003] DSA-278 sendmail - char-to-int conversion
	{CVE-2003-0161}
	[woody] - sendmail 8.12.3-6.3
[03 Apr 2003] DSA-277 apcupsd - buffer overflows, format string
	{CVE-2003-0098 CVE-2003-0099}
	[woody] - apcupsd 3.8.5-1.1.1
[03 Apr 2003] DSA-276 linux-kernel-s390 - local privilege escalation
	{CVE-2003-0127}
	[woody] - kernel-patch-2.4.17-s390 0.0.20020816-0.woody.1.1
	[woody] - kernel-image-2.4.17-s390 2.4.17-2.woody.2.2
[02 Apr 2003] DSA-275 lpr-ppd - buffer overflow
	{CVE-2003-0144}
	[woody] - lpr-ppd 0.72-2.1
[28 Mar 2003] DSA-274 mutt - buffer overflow
	{CVE-2003-0167}
	[woody] - mutt 1.3.28-2.2
[28 Mar 2003] DSA-273 krb4 - Cryptographic weakness
	{CVE-2003-0138 CVE-2003-0139}
	[woody] - krb4 1.1-8-2.3
[28 Mar 2003] DSA-272 dietlibc - integer overflow
	{CVE-2003-0028}
	[woody] - dietlibc 0.12-2.5
[27 Mar 2003] DSA-271 ecartis - unauthorized password change
	{CVE-2003-0162}
	[woody] - ecartis 0.129a+1.0.0-snap20020514-1.1
[27 Mar 2003] DSA-270 linux-kernel-mips - local privilege escalation
	{CVE-2003-0127}
	[woody] - kernel-patch-2.4.17-mips 2.4.17-0.020226.2.woody1
	[woody] - kernel-patch-2.4.19-mips 2.4.19-0.020911.1.woody1
[26 Mar 2003] DSA-269 heimdal - Cryptographic weakness
	{CVE-2003-0138}
	[woody] - heimdal 0.4e-7.woody.8
[25 Mar 2003] DSA-268 mutt - buffer overflow
	{CVE-2003-0140}
	[woody] - mutt 1.3.28-2.1
[24 Mar 2003] DSA-267 lpr - buffer overflow
	{CVE-2003-0144}
	[woody] - lpr 2000.05.07-4.3
[24 Mar 2003] DSA-266 krb5 - several vulnerabilities
	{CVE-2003-0028 CVE-2003-0072 CVE-2003-0082 CVE-2003-0138 CVE-2003-0139}
	[woody] - krb5 1.2.4-5woody4
[21 Mar 2003] DSA-265 bonsai - several vulnerabilities
	{CVE-2003-0152 CVE-2003-0153 CVE-2003-0154 CVE-2003-0155}
	[woody] - bonsai 1.3+cvs20020224-1woody1
[19 Mar 2003] DSA-264 lxr - missing filename sanitizing
	{CVE-2003-0156}
	[woody] - lxr 0.3-3
[17 Mar 2003] DSA-263 netpbm-free - math overflow errors
	{CVE-2003-0146}
	[woody] - netpbm-free 2:9.20-8.2
[15 Mar 2003] DSA-262 samba - remote exploit
	{CVE-2003-0085 CVE-2003-0086}
	[woody] - samba 2.2.3a-12.1
[14 Mar 2003] DSA-261 tcpdump - infinite loop
	{CVE-2003-0093 CVE-2003-0145}
	[woody] - tcpdump 3.6.2-2.4
[13 Mar 2003] DSA-260 file - buffer overflow
	{CVE-2003-0102}
	[woody] - file 3.37-3.1.woody.1
[12 Mar 2003] DSA-259 qpopper - mail user privilege escalation
	{CVE-2003-0143}
	[woody] - qpopper 4.0.4-2.woody.3
[10 Mar 2003] DSA-258 ethereal - format string vulnerability
	{CVE-2003-0081}
	[woody] - ethereal 0.9.4-1woody3
[04 Mar 2003] DSA-257 sendmail - remote exploit
	{CVE-2002-1337}
	[woody] - sendmail 8.12.3-5
	[woody] - sendmail-wide 8.12.3+3.5Wbeta-5.2
[28 Feb 2003] DSA-256 mhc - insecure temporary file
	{CVE-2003-0120}
	[woody] - mhc 0.25+20010625-7.1
[27 Feb 2003] DSA-255 tcpdump - infinite loop
	{CVE-2003-0108 CVE-2002-0380}
	[woody] - tcpdump 3.6.2-2.3
[27 Feb 2003] DSA-254 traceroute-nanog - buffer overflow
	{CVE-2002-1051 CVE-2002-1364 CVE-2002-1386 CVE-2002-1387}
	[woody] - traceroute-nanog 6.1.1-1.2
[24 Feb 2003] DSA-253 openssl - information leak
	{CVE-2003-0078}
	[woody] - openssl 0.9.6c-2.woody.2
[21 Feb 2003] DSA-252 slocate - buffer overflow
	{CVE-2003-0056}
	[woody] - slocate 2.6-1.3.1
[14 Feb 2003] DSA-251 w3m - missing HTML quoting
	{CVE-2002-1335 CVE-2002-1348}
	[woody] - w3m 0.3-2.4
[12 Feb 2003] DSA-250 w3mmee-ssl - missing HTML quoting
	{CVE-2002-1335 CVE-2002-1348}
	NOTE: not in sid/sarge
[11 Feb 2003] DSA-249 w3mmee - missing HTML quoting
	{CVE-2002-1335 CVE-2002-1348}
	[woody] - w3mmee 0.3-2.4
[31 Jan 2003] DSA-248 hypermail - buffer overflows
	{CVE-2003-0057}
	[woody] - hypermail 2.1.3-2.0
[30 Jan 2003] DSA-247 courier-ssl - missing input sanitizing
	{CVE-2003-0040}
	[woody] - courier 0.37.3-3.3
[29 Jan 2003] DSA-246 tomcat - information exposure, cross site scripting
	{CVE-2003-0042 CVE-2003-0043 CVE-2003-0044}
	[woody] - tomcat 3.3a-4woody.1
[28 Jan 2003] DSA-245 dhcp3 - ignored counter boundary
	{CVE-2003-0039}
	[woody] - dhcp3 3.0+3.0.1rc9-2.2
[27 Jan 2003] DSA-244 noffle - buffer overflows
	{CVE-2003-0037}
	[woody] - noffle 1.0.1-1.1
[24 Jan 2003] DSA-243 kdemultimedia - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdemultimedia 2.2.2-8.2
[24 Jan 2003] DSA-242 kdebase - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdebase 2.2.2-14.2
[24 Jan 2003] DSA-241 kdeutils - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdeutils 2.2.2-9.2
[23 Jan 2003] DSA-240 kdegames - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdegames 2.2.2-2.2
[23 Jan 2003] DSA-239 kdesdk - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdesdk 2.2.2-3.2
[23 Jan 2003] DSA-238 kdepim - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdepim 2.2.2-5.2
[22 Jan 2003] DSA-237 kdenetwork - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdenetwork 2.2.2-14.6
[22 Jan 2003] DSA-236 kdelibs - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdelibs 2.2.2-13.woody.6
[22 Jan 2003] DSA-235 kdegraphics - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdegraphics 2.2.2-6.10
[22 Jan 2003] DSA-234 kdeadmin - several vulnerabilities
	{CVE-2002-1393}
	[woody] - kdeadmin 2.2.2-7.2
[21 Jan 2003] DSA-233 cvs - doubly freed memory
	{CVE-2003-0015}
	[woody] - cvs 1.11.1p1debian-8.1
[20 Jan 2003] DSA-232 cupsys - several vulnerabilities
	{CVE-2002-1366 CVE-2002-1367 CVE-2002-1368 CVE-2002-1369 CVE-2002-1371 CVE-2002-1372 CVE-2002-1383 CVE-2002-1384}
	[woody] - cupsys 1.1.14-4.3
[17 Jan 2003] DSA-231 dhcp3 - stack overflows
	{CVE-2003-0026}
	[woody] - dhcp3 3.0+3.0.1rc9-2.1
[16 Jan 2003] DSA-230 bugzilla - insecure permissions, spurious backup files
	{CVE-2003-0012 CVE-2003-0013}
	[woody] - bugzilla 2.14.2-0woody4
[15 Jan 2003] DSA-229 imp - SQL injection
	{CVE-2003-0025}
	[woody] - imp 2.2.6-5.1
[14 Jan 2003] DSA-228 libmcrypt - buffer overflows and memory leak
	{CVE-2003-0031 CVE-2003-0032}
	[woody] - libmcrypt 2.5.0-1woody1
[13 Jan 2003] DSA-227 openldap2 - buffer overflows and other bugs
	{CVE-2002-1378 CVE-2002-1379 CVE-2002-1508}
	[woody] - openldap2 2.0.23-6.3
[10 Jan 2003] DSA-226 xpdf-i - integer overflow
	{CVE-2002-1384}
	[woody] - xpdf <not-affected> (xpdf-i is only a dummy package)
[09 Jan 2003] DSA-225 tomcat4 - source disclosure
	{CVE-2002-1394}
	[woody] - tomcat4 4.0.3-3woody2
[08 Jan 2003] DSA-224 canna - buffer overflow and more
	{CVE-2002-1158 CVE-2002-1159}
	[woody] - canna 3.5b2-46.2
[07 Jan 2003] DSA-223 geneweb - information exposure
	{CVE-2002-1390}
	[woody] - geneweb 4.06-2
[06 Jan 2003] DSA-222 xpdf - integer overflow
	{CVE-2002-1384}
	[woody] - xpdf 1.00-3.1
[03 Jan 2003] DSA-221 mhonarc - cross site scripting
	{CVE-2002-1388}
	[woody] - mhonarc 2.5.2-1.3
[02 Jan 2003] DSA-220 squirrelmail - cross site scripting
	{CVE-2002-1341}
	[woody] - squirrelmail 1.2.6-1.3
[31 Dec 2002] DSA-219 dhcpcd - remote command execution
	{CVE-2002-1403}
	NOTE: Woody doesn't have dhcpd
[30 Dec 2002] DSA-218 bugzilla - cross site scripting
	{CVE-2002-2260}
	[woody] - bugzilla 2.14.2-0woody3
[27 Dec 2002] DSA-217 typespeed - buffer overflow
	{CVE-2002-1389}
	[woody] - typespeed 0.4.1-2.1
[24 Dec 2002] DSA-216 fetchmail - buffer overflow
	{CVE-2002-1365}
	[woody] - fetchmail 5.9.11-6.2
[23 Dec 2002] DSA-215 cyrus-imapd - buffer overflow
	{CVE-2002-1580}
	[woody] - cyrus-imapd 1.5.19-9.1
[20 Dec 2002] DSA-214 kdenetwork - buffer overflows
	{CVE-2002-1306}
	[woody] - kdenetwork 2.2.2-14.5
[19 Dec 2002] DSA-213 libpng - buffer overflow
	{CVE-2002-1363}
	[woody] - libpng 1.0.12-3.woody.3
	[woody] - libpng3 1.2.1-1.1.woody.3
[17 Dec 2002] DSA-212 mysql - multiple problems
	{CVE-2002-1373 CVE-2002-1374 CVE-2002-1375 CVE-2002-1376}
	[woody] - mysql 3.23.49-8.2
[13 Dec 2002] DSA-211 micq - denial of service
	{CVE-2002-1362}
	[woody] - micq 0.4.9-0woody3
[13 Dec 2002] DSA-210 lynx - CRLF injection
	{CVE-2002-1405}
	[woody] - lynx 2.8.3-1.1
	[woody] - lynx-ssl 2.8.3.1-1.1
[12 Dec 2002] DSA-209 wget - directory traversal
	{CVE-2002-1344}
	[woody] - wget 1.8.1-6.1
[12 Dec 2002] DSA-208 perl - broken safe compartment
	{CVE-2002-1323}
	[woody] - perl 5.6.1-8.2
[11 Dec 2002] DSA-207 tetex-bin - arbitrary command execution
	{CVE-2002-0836}
	[woody] - tetex-bin 1.0.7+20011202-7.1
[10 Dec 2002] DSA-206 tcpdump - denial of service
	{CVE-2002-1350}
	[woody] - tcpdump 3.6.2-2.2
[10 Dec 2002] DSA-205 gtetrinet - buffer overflow
	[woody] - gtetrinet 0.4.1-9woody1.1
[05 Dec 2002] DSA-204 kdelibs - arbitrary program execution
	{CVE-2002-1281 CVE-2002-1282}
	[woody] - kdelibs 2.2.2-13.woody.5
[04 Dec 2002] DSA-203 smb2www - arbitrary command execution
	{CVE-2002-1342}
	[woody] - smb2www 980804-16.1
[03 Dec 2002] DSA-202 im - insecure temporary files
	{CVE-2002-1395}
	[woody] - im 141-18.1
[02 Dec 2002] DSA-201 freeswan - denial of service
	{CVE-2002-0666}
	[woody] - freeswan 1.96-1.4
[22 Nov 2002] DSA-200 samba - remote exploit
	{CVE-2002-1318}
	[woody] - samba 2.2.3a-12
[19 Nov 2002] DSA-199 mhonarc - cross site scripting
	{CVE-2002-1307}
	[woody] - mhonarc 2.5.2-1.2
[18 Nov 2002] DSA-198 nullmailer - denial of service
	{CVE-2002-1313}
	[woody] - nullmailer 1.00RC5-16.1woody2
[15 Nov 2002] DSA-197 courier - buffer overflow
	{CVE-2002-1311}
	[woody] - courier 0.37.3-2.3
[14 Nov 2002] DSA-196 bind - several vulnerabilities
	{CVE-2002-0029 CVE-2002-1219 CVE-2002-1220 CVE-2002-1221}
	[woody] - bind 8.3.3-2.0woody1
[13 Nov 2002] DSA-195 apache-perl - several vulnerabilities
	{CVE-2002-0839 CVE-2002-0840 CVE-2002-0843 CVE-2001-0131 CVE-2002-1233}
	[woody] - apache-perl 1.3.26-1-1.26-0woody2
[12 Nov 2002] DSA-194 masqmail - buffer overflows
	{CVE-2002-1279}
	[woody] - masqmail 0.1.16-2.1
[11 Nov 2002] DSA-193 kdenetwork - buffer overflow
	{CVE-2002-1247}
	[woody] - kdenetwork 4:2.2.2-14.2
[08 Nov 2002] DSA-192 html2ps - arbitrary code execution
	{CVE-2002-1275}
	[woody] - html2ps 1.0b3-1.1
[07 Nov 2002] DSA-191 squirrelmail - cross site scripting
	{CVE-2002-1131 CVE-2002-1132 CVE-2002-1276}
	[woody] - squirrelmail 1.2.6-1.1
[07 Nov 2002] DSA-190 wmaker - buffer overflow
	{CVE-2002-1277}
	[woody] - wmaker 0.80.0-4.1
[06 Nov 2002] DSA-189 luxman - local root exploit
	{CVE-2002-1245}
	[woody] - luxman 0.41-17.1
[05 Nov 2002] DSA-188 apache-ssl - several vulnerabilities
	{CVE-2002-0839 CVE-2002-0840 CVE-2002-0843 CVE-2001-0131 CVE-2002-1233}
	[woody] - apache-ssl 1.3.26.1+1.48-0woody3
[04 Nov 2002] DSA-187 apache - several vulnerabilities
	{CVE-2002-0839 CVE-2002-0840 CVE-2002-0843 CVE-2001-0131 CVE-2002-1233}
	[woody] - apache 1.3.26-0woody
[01 Nov 2002] DSA-186 log2mail - buffer overflow
	{CVE-2002-1251}
	[woody] - log2mail 0.2.5.1
[31 Oct 2002] DSA-185 heimdal - buffer overflow
	{CVE-2002-1235}
	[woody] - heimdal 0.4e-7.woody.5
[30 Oct 2002] DSA-184 krb4 - buffer overflow
	{CVE-2002-1235}
	[woody] - krb4 1.1-8-2.2
[29 Oct 2002] DSA-183 krb5 - buffer overflow
	{CVE-2002-1235}
	[woody] - krb5 1.2.4-5woody3
[28 Oct 2002] DSA-182 kdegraphics - buffer overflow
	{CVE-2002-0838}
	[woody] - kdegraphics 2.2.2-6.8
[22 Oct 2002] DSA-181 libapache-mod-ssl - cross site scripting
	{CVE-2002-1157}
	[woody] - libapache-mod-ssl 2.8.9-2.1
[21 Oct 2002] DSA-180 nis - information leak 
	{CVE-2002-1232}
	[woody] - nis 3.9-6.1
[18 Oct 2002] DSA-179 gnome-gv - buffer overflow
	{CVE-2002-0838}
	[woody] - gnome-gv 1.1.96-3.1
[17 Oct 2002] DSA-178 heimdal - remote command execution
	{CVE-2002-1225 CVE-2002-1226}
	[woody] - heimdal 0.4e-7.woody.4
[17 Oct 2002] DSA-177 pam - serious security violation
	{CVE-2002-1227}
	[woody] - pam <not-affected>
	[sarge] - pam <not-affected>
[16 Oct 2002] DSA-176 gv - buffer overflow
	{CVE-2002-0838}
	[woody] - gv 3.5.8-26.1
[15 Oct 2002] DSA-175 syslog-ng - buffer overflow
	{CVE-2002-1200}
	[woody] - syslog-ng 1.5.15-1.1
[14 Oct 2002] DSA-174 heartbeat - buffer overflow
	{CVE-2002-1215}
	[woody] - heartbeat 0.4.9.0l-7.2
[09 Oct 2002] DSA-173 bugzilla - privilege escalation
	{CVE-2002-1196}
	[woody] - bugzilla 2.14.2-0woody2
[08 Oct 2002] DSA-172 tkmail - insecure temporary files
	{CVE-2002-1193}
	[woody] - tkmail 4.0beta9-8.1
[07 Oct 2002] DSA-171 fetchmail - buffer overflows
	{CVE-2002-1175 CVE-2002-1174}
	[woody] - fetchmail-ssl 5.9.11-6.1
	[woody] - fetchmail 5.9.11-6.1
[04 Oct 2002] DSA-170 tomcat4 - source code disclosure
	{CVE-2002-1148}
	[woody] - tomcat4 4.0.3-3woody1
[25 Sep 2002] DSA-169 htcheck - cross site scripting
	{CVE-2002-1195}
	[woody] - htcheck 1.1-1.1
[18 Sep 2002] DSA-168 php - bypassing safe_mode, CRLF injection
	{CVE-2002-0985 CVE-2002-0986}
	[woody] - php3 3.0.18-23.1woody1
	[woody] - php4 4.1.2-5
[16 Sep 2002] DSA-167 kdelibs - cross site scripting
	{CVE-2002-1151}
	[woody] - kdelibs 4:2.2.2-13.woody.3
[13 Sep 2002] DSA-166 purity - buffer overflows
	{CVE-2002-1124}
	[woody] - purity 1-14.2
[12 Sep 2002] DSA-165 postgresql - buffer overflows
	{CVE-2002-0972 CVE-2002-1398 CVE-2002-1400 CVE-2002-1401 CVE-2002-1402}
	[woody] - postgresql 7.2.1-2woody2
[10 Sep 2002] DSA-164 cacti - arbitrary code execution
	{CVE-2002-1477 CVE-2002-1478}
	[woody] - cacti 0.6.7-2.1
[09 Sep 2002] DSA-163 mhonarc - cross site scripting
	{CVE-2002-0738}
	[woody] - mhonarc 2.5.2-1.1
[06 Sep 2002] DSA-162 ethereal - buffer overflow
	{CVE-2002-0834}
	[woody] - ethereal 0.9.4-1woody2
[04 Sep 2002] DSA-161 mantis - privilege escalation
	{CVE-2002-1115 CVE-2002-1116}
	[woody] - mantis 0.17.1-2.5
[03 Sep 2002] DSA-160 scrollkeeper - insecure temporary file creation
	{CVE-2002-0662}
	[woody] - scrollkeeper 0.3.6-3.1
[28 Aug 2002] DSA-159 python - insecure temporary files
	{CVE-2002-1119}
	[woody] - python1.5 1.5.2-23.1
	[woody] - python2.1 2.1.3-3.1
	[woody] - python2.2 2.2.1-4.1
[27 Aug 2002] DSA-158 gaim - arbitrary program execution
	{CVE-2002-0989}
	[woody] - gaim 0.58-2.2
[23 Aug 2002] DSA-157 irssi-text - denial of service
	{CVE-2002-0983}
	[woody] - irssi-text 0.8.4-3.1
[22 Aug 2002] DSA-156 epic4-script-light - arbitrary script execution
	{CVE-2002-0984}
	[woody] - epic4-script-light 2.7.30p5-1.1
[17 Aug 2002] DSA-155 kdelibs - privacy escalation with Konqueror
	{CVE-2002-0970}
	[woody] - kdelibs 2.2.2-13.woody.2
[15 Aug 2002] DSA-154 fam - privilege escalation
	{CVE-2002-0875}
	[woody] - fam 2.6.6.1-5.2
[14 Aug 2002] DSA-153 mantis - cross site code execution and privilege escalation
	{CVE-2002-1114 CVE-2002-1113 CVE-2002-1112 CVE-2002-1111 CVE-2002-1110}
	[woody] - mantis 0.17.1-2.2
[13 Aug 2002] DSA-152 l2tpd - missing random seed
	{CVE-2002-0872 CVE-2002-0873}
	[woody] - l2tpd 0.67-1.1
[13 Aug 2002] DSA-151 xinetd - pipe exposure
	{CVE-2002-0871}
	[woody] - xinetd 1:2.3.4-1.2
[13 Aug 2002] DSA-150 interchange - illegal file exposition
	{CVE-2002-0874}
	[woody] - interchange 4.8.3.20020306-1.woody.1
[13 Aug 2002] DSA-149 glibc - integer overflow
	{CVE-2002-0391}
	[woody] - glibc 2.2.5-11.1
[12 Aug 2002] DSA-148 hylafax - buffer overflows and format string vulnerabilities
	{CVE-2002-1049 CVE-2002-1050 CVE-2001-1034}
	[woody] - hylafax 1:4.1.1-1.1
[08 Aug 2002] DSA-147 mailman - cross-site scripting
	{CVE-2002-0388 CVE-2002-0855}
	[woody] - mailman 2.0.11-1woody4
[08 Aug 2002] DSA-146 dietlibc - integer overflow
	{CVE-2002-0391}
	[woody] - dietlibc 0.12-2.4
[07 Aug 2002] DSA-145 tinyproxy - doubly freed memory
	{CVE-2002-0847}
	[woody] - tinyproxy 1.4.3-2woody2
[06 Aug 2002] DSA-144 wwwoffle - improper input handling
	{CVE-2002-0818}
	[woody] - wwwoffle 2.7a-1.2
[05 Aug 2002] DSA-143 krb5 - integer overflow
	{CVE-2002-0391}
	[woody] - krb5 1.2.4-5woody1
[05 Aug 2002] DSA-142 openafs - integer overflow
	{CVE-2002-0391}
	[woody] - openafs 1.2.3final2-6
[01 Aug 2002] DSA-141 mpack - buffer overflow
	{CVE-2002-1425}
	[woody] - mpack 1.5-7woody2
[05 Aug 2002] DSA-140 libpng - buffer overflow
	{CVE-2002-0660 CVE-2002-0728}
	[woody] - libpng 1.0.12-3.woody.2
	[woody] - libpng3 1.2.1-1.1.woody.2
[01 Aug 2002] DSA-139 super - format string vulnerability
	{CVE-2002-0817}
	[woody] - super 3.16.1-1.2 
[01 Aug 2002] DSA-138 gallery - remote exploit
	{CVE-2002-1412}
	[woody] - gallery 1.2.5-7 
[30 Jul 2002] DSA-137 mm - insecure temporary files
	{CVE-2002-0658}
	[woody] - mm 1.1.3-6.1
[30 Jul 2002] DSA-136 openssl - multiple remote exploits 
	{CVE-2002-0655 CVE-2002-0656 CVE-2002-0657 CVE-2002-0659}
	[woody] - openssl094 0.9.4-6.woody.2
	[woody] - openssl095 0.9.5a-6.woody.1
	[woody] - openssl 0.9.6c-2.woody.1
[02 Jul 2002] DSA-135 libapache-mod-ssl -- buffer overflow / DoS
	{CVE-2002-0653}
	[woody] - libapache-mod-ssl 2.8.9-2