[Secure-testing-commits] r3144 - data/CVE

[Florian Weimer]

Author: fw
Date: 2005-12-23 22:24:50 +0000 (Fri, 23 Dec 2005)
New Revision: 3144

Modified:
   data/CVE/list
Log:
two more fixed versions


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-23 22:08:00 UTC (rev 3143)
+++ data/CVE/list	2005-12-23 22:24:50 UTC (rev 3144)
@@ -4174,6 +4174,7 @@
 CVE-2005-2976 (Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 ...)
 	{DSA-913-1 DSA-911-1}
 	- gdk-pixbuf 0.22.0-11 (bug #339431; medium)
+	- gtk+2.0 2.6.10-2
 CVE-2005-2975 (io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before ...)
 	{DSA-913-1 DSA-911-1}
 	- gdk-pixbuf 0.22.0-11 (bug #339431; low)
@@ -8772,6 +8773,8 @@
 	{DSA-797-2 DSA-797-1 DSA-763-1}
 	NOTE: This is only contrib code not built in the binary packages AFAIK
 	- zlib 1:1.2.3-1 (low)
+	- zsync 0.4.1-1 (low)
+	NOTE: zsync 0.4.0-2 (mentioned in DSA-797-1) was never uploaded.
 CVE-2005-1848 (The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause ...)
 	{DSA-750-1}
 	- dhcpcd 1:1.3.22pl4-22 (medium)