[Secure-testing-commits] r4564 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2006-08-14 17:11:54 +0000 (Mon, 14 Aug 2006)
New Revision: 4564

Modified:
   data/CVE/list
Log:
new libmusicbrainz issue (medium)
CVE-2006-3121: new heartbeat issue fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-08-13 21:15:15 UTC (rev 4563)
+++ data/CVE/list	2006-08-14 17:11:54 UTC (rev 4564)
@@ -1,3 +1,6 @@
+CVE-2006-XXXX [libmusicbrainz buffer overflows]
+	- libmusicbrainz-2.1 (medium; bug filed)
+	- libmusicbrainz-2.0 (medium; bug filed)
 CVE-2006-XXXX [crash in the certificate verification logic]
 	NOTE: GNUTLS-SA-2006-2
 	- gnutls11 <unfixed> (medium)
@@ -2099,8 +2102,10 @@
 	- cfs 1.4.1-17
 CVE-2006-3122 (The supersede_lease function in memory.c in ISC DHCP server 2.0pl5 ...)
 	{DSA-1143-1}
-CVE-2006-3121
+CVE-2006-3121 [heartbeat insufficient bounds checking]
 	RESERVED
+	- heartbeat-2 2.0.6-2
+	- heartbeat 1.2.4-14
 CVE-2006-3120 (Format string vulnerability in Brian Wotring Osiris before 4.2.1 ...)
 	{DSA-1129}
 	- osiris 4.2.0-2 (medium)