[Secure-testing-commits] r7949 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-01-17 00:13:15 +0000 (Thu, 17 Jan 2008)
New Revision: 7949

Modified:
   data/CVE/list
Log:
cveified vlc and python-paramiko

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-16 23:12:00 UTC (rev 7948)
+++ data/CVE/list	2008-01-17 00:13:15 UTC (rev 7949)
@@ -107,7 +107,7 @@
 CVE-2008-0238 (Multiple heap-based buffer overflows in the rmff_dump_cont function in ...)
 	{DTSA-109-1}
 	- xine-lib <unfixed> (medium; bug #460551)
-CVE-2008-XXXX [insecure use of RandomPool]
+CVE-2008-0299 [insecure use of RandomPool]
 	- python-paramiko <unfixed> (medium; bug #460706)
 	NOTE: http://www.lag.net/pipermail/paramiko/2008-January/000599.html
 CVE-2008-0237 (The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 ...)
@@ -812,19 +812,19 @@
 	NOT-FOR-US: Blakord Portal
 CVE-2007-6611 (Cross-site scripting (XSS) vulnerability in view.php in Mantis before ...)
 	- mantis 1.0.8-4 (low; bug #458377)
-CVE-2007-XXXX [vlc arbitrary file overwrite vulnerability via crafted m3u playlists]
+CVE-2007-6683 [vlc arbitrary file overwrite vulnerability via crafted m3u playlists]
 	- vlc 0.8.6.c-4.1 (medium; bug #458318)
 	[lenny] - vlc 0.8.6.c-4.1~lenny1
 	NOTE: see https://trac.videolan.org/vlc/ticket/1371
-CVE-2007-XXXX [vlc format string vulnerability in built-in web-server]
+CVE-2007-6682 [vlc format string vulnerability in built-in web-server]
 	- vlc 0.8.6.c-4.1 (medium; bug #458318)
 	[lenny] - vlc 0.8.6.c-4.1~lenny1
 	NOTE: see http://www.securityfocus.com/archive/1/485488/30/0/threaded
-CVE-2007-XXXX [vlc buffer overflow in subtitle handling]
+CVE-2007-6681 [vlc buffer overflow in subtitle handling]
 	- vlc 0.8.6.c-4.1 (low; bug #458318)
 	[lenny] - vlc 0.8.6.c-4.1~lenny1
 	NOTE: see http://www.securityfocus.com/archive/1/485488/30/0/threaded
-CVE-2007-XXXX [vlc remote denial of service in rtsp module]
+CVE-2007-6684 [vlc remote denial of service in rtsp module]
 	- vlc 0.8.6.c-4.1 (unimportant; bug #458318)
 	[lenny] - vlc 0.8.6.c-4.1~lenny1
 	NOTE: That's hardly a security problem, just a bug