[Secure-testing-commits] r6305 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-14 19:49:51 +0000 (Tue, 14 Aug 2007)
New Revision: 6305

Modified:
   data/CVE/list
Log:
new issue: libvorbis (medium)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-14 19:12:40 UTC (rev 6304)
+++ data/CVE/list	2007-08-14 19:49:51 UTC (rev 6305)
@@ -496,7 +496,9 @@
 CVE-2007-4030
 	RESERVED
 CVE-2007-4029 (libvorbis 1.1.2, and possibly other versions before 1.2.0, allows ...)
-	TODO: check
+	- libvorbis 1.2.0.dfsg-1 (medium)
+	[etch] - libvorbis <unfixed> (bug #437916; medium)
+	[sarge] - libvorbis <unfixed> (bug #437916; medium)
 CVE-2007-4028 (Absolute path traversal vulnerability in index.php in Webspell 4.01.02 ...)
 	NOT-FOR-US: WebSPELL
 CVE-2007-4027 (Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow ...)