[Secure-testing-commits] r13307 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-11-18 09:14:21 +0000 (Wed, 18 Nov 2009)
New Revision: 13307

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-11-17 22:07:18 UTC (rev 13306)
+++ data/CVE/list	2009-11-18 09:14:21 UTC (rev 13307)
@@ -1063,6 +1063,7 @@
 	- linux-2.6 2.6.31-2 (high)
 	- linux-2.6.24 <removed> (high)
 CVE-2009-3546 (The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.0, and the ...)
+	{DSA-1936-1}
 	- libgd2 2.0.36~rc1~dfsg-3.1 (medium; bug #552534)
 	- php5 <not-affected> (the php packages use the system libgd2)
 	NOTE: http://svn.php.net/viewvc?view=revision&revision=289557
@@ -43898,6 +43899,7 @@
 	- wireshark 0.99.4-5 (low)
 	[sarge] - ethereal <not-affected> (Vulnerable code not present)
 CVE-2007-0455 (Buffer overflow in the gdImageStringFTEx function in gdft.c in GD ...)
+	{DSA-1936-1}
 	- libgd2 2.0.35.dfsg-1 (bug #408982; low)
 	[sarge] - libgd2 <no-dsa> (Minor issue, hardly exploitable)
 	[etch] - libgd2 <no-dsa> (Minor issue, hardly exploitable)