[Secure-testing-commits] r10295 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-11-05 23:52:47 +0000 (Wed, 05 Nov 2008)
New Revision: 10295

Modified:
   data/CVE/list
Log:
vlc cue parsing fixed in 0.8.6.h-5, dtsa pending, thanks xtophe!

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-05 22:57:02 UTC (rev 10294)
+++ data/CVE/list	2008-11-05 23:52:47 UTC (rev 10295)
@@ -1,8 +1,9 @@
 CVE-2008-XXXX [vlc buffer overflow in cue handling]
-	- vlc <unfixed> (medium; bug #504639)
+	- vlc 0.8.6.h-5 (medium; bug #504639)
 	NOTE: CVE id requested
 CVE-2008-XXXX [vlc buffer overflow in realtext subtitle parsing]
 	- vlc <not-affected> (Vulnerable code not present in 0.8.x)
+	TODO: recheck if 0.9 gets uploaded to unstable
 CVE-2008-4931
 	RESERVED
 CVE-2008-4930 (MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded ...)