[Secure-testing-commits] r13373 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-11-25 09:14:52 +0000 (Wed, 25 Nov 2009)
New Revision: 13373

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-11-24 22:41:52 UTC (rev 13372)
+++ data/CVE/list	2009-11-25 09:14:52 UTC (rev 13373)
@@ -1719,6 +1719,7 @@
 	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3379 (Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla ...)
+	{DSA-1939-1}
 	- libvorbis 1.2.3-1 (medium)
 	- xulrunner 1.9.1.4-1
 	[lenny] - xulrunner <not-affected> (Only affects Firefox 3.5)
@@ -2271,7 +2272,7 @@
 	TODO: next point release [lenny] - libjson-ruby 1.1.2-1+lenny1
 	- lucene2 2.9.1+ds1-2 (unimportant; bug #555225)
 	[etch] - lucene2 <not-affected> (prototype.js not present)
-        NOTE: prototype.js copy unused per #555225
+	NOTE: prototype.js copy unused per #555225
 	- glpi 0.72.3-1 (low; bug #555228)
 	[etch] - glpi <no-dsa> (minor issue)
 	[lenny] - glpi <no-dsa> (minor issue)
@@ -4404,6 +4405,7 @@
 	- xulrunner 1.9.0.13-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-2663 (libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 ...)
+	{DSA-1939-1}
 	- libvorbis 1.2.0.dfsg-6 (medium; bug #540958)
 	- xulrunner 1.9.1.2-1 (medium; bug #540961)
 	[etch] - xulrunner <not-affected> (vulnerability introduced in 1.9.1.0)