[Secure-testing-commits] r12970 - in data: . CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-10-10 04:41:15 +0000 (Sat, 10 Oct 2009)
New Revision: 12970

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
- advi affected by camlimages issue due to static link
- bug submitted for advi static link
- fix dillo issue tracking

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-10 04:09:13 UTC (rev 12969)
+++ data/CVE/list	2009-10-10 04:41:15 UTC (rev 12970)
@@ -4076,8 +4076,10 @@
 CVE-2009-2295 (Multiple integer overflows in CamlImages 2.2 and earlier might allow ...)
 	{DSA-1832-1}
 	- camlimages 1:3.0.1-2 (medium; bug #535909)
+	- advi <unfixed> (medium; bug #550440)
 CVE-2009-2294 (Integer overflow in the Png_datainfo_callback function in Dillo 2.1 ...)
-	- dillo 2.2.1 (medium; bug #535788)
+	- dillo <unfixed> (medium; bug #535788)
+	NOTE: fixed in upstream version 2.2.1
 CVE-2009-2293 (Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote ...)
 	NOT-FOR-US: Optimum Web Design Tutorial Share
 CVE-2009-2292 (Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 ...)

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2009-10-10 04:09:13 UTC (rev 12969)
+++ data/embedded-code-copies	2009-10-10 04:41:15 UTC (rev 12970)
@@ -897,7 +897,7 @@
 	- gcc-mingw32 <unfixed> (embed)
 
 camlimages
-	- advi <unfixed> (embed)
+	- advi <unfixed> (static; bug #550441)
 
 memcached
 	- memcachedb <unfixed> (embed)