[Secure-testing-commits] r12495 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-08-06 09:14:23 +0000 (Thu, 06 Aug 2009)
New Revision: 12495

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-08-06 08:32:21 UTC (rev 12494)
+++ data/CVE/list	2009-08-06 09:14:23 UTC (rev 12495)
@@ -504,6 +504,7 @@
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-39.html
 CVE-2009-2470 (Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote ...)
+	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-38.html
@@ -3328,7 +3329,7 @@
 	[squeeze] - linux-2.6 2.6.26-17
 	- linux-2.6.24 <removed>
 CVE-2009-1438 (Integer overflow in the CSoundFile::ReadMed function ...)
-	{DSA-1850-1}
+	{DSA-1851-1 DSA-1850-1}
 	- libmodplug 1:0.8.7-1 (low; bug #526657; bug #527076)
 	- gst-plugins-bad0.10 <not-affected> (it builds against an external libmodplug; bug #527075)
 CVE-2009-1437 (Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka ...)