[Secure-testing-commits] r8708 - data/CVE

[joeyh at alioth.debian.org]

Author: joeyh
Date: 2008-05-04 21:14:14 +0000 (Sun, 04 May 2008)
New Revision: 8708

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-04 20:44:36 UTC (rev 8707)
+++ data/CVE/list	2008-05-04 21:14:14 UTC (rev 8708)
@@ -239,6 +239,7 @@
 CVE-2008-1928 (Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause ...)
 	NOT-FOR-US: Imager
 CVE-2008-1926 (Argument injection vulnerability in login (login-utils/login.c) in ...)
+	{DTSA-126-1}
 	- util-linux 2.13.1.1-1 (low; bug #478135)
 CVE-2008-1923 (The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision ...)
 	- asterisk 1:1.4.19.1~dfsg-1 (medium)
@@ -775,6 +776,7 @@
 	NOTE: This is more a generic bug and not a security issue: the random output would 
 	NOTE: need to match the name of an existing macro
 CVE-2008-1686 (Array index vulnerability in Speex 1.1.12 and earlier, as used in ...)
+	{DTSA-127-1}
 	- speex 1.2~beta2-1 (medium)
 	- libfishsound 0.7.0-2.2 (medium; bug #475152)
 	- xine-lib 1.1.12-1 (medium)