[Secure-testing-commits] r10125 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-10-20 07:30:40 +0000 (Mon, 20 Oct 2008)
New Revision: 10125

Modified:
   data/CVE/list
Log:
vlc in unstable not affected by ty parsing issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-19 20:28:53 UTC (rev 10124)
+++ data/CVE/list	2008-10-20 07:30:40 UTC (rev 10125)
@@ -1,6 +1,7 @@
 CVE-2008-XXXX [vlc overflow in ty parsing]
-	- vlc <unfixed> (bug #502726)
-	NOTE: marked unfixed for now, needs more investigation if unstable is affected
+	- vlc <not-affected> (bug #502726)
+	NOTE: code in 0.8.6.i-2 does not have this flaw, experimental version (0.9.4 is vulnerable)
+	TODO: check if >= 0.9.4 is uploaded to unstable
 	NOTE: requested CVE id on oss-sec
 CVE-2008-XXXX [mantis code execution]
 	- mantis <unfixed> (medium; bug #502728)