[Secure-testing-commits] r13035 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-10-16 21:06:04 +0000 (Fri, 16 Oct 2009)
New Revision: 13035

Modified:
   data/CVE/list
Log:
bug submitted for advi embed of camlimages

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-16 15:38:55 UTC (rev 13034)
+++ data/CVE/list	2009-10-16 21:06:04 UTC (rev 13035)
@@ -903,6 +903,7 @@
 CVE-2009-3296 [camlimages: tiffread.c integer overflows]
 	RESERVED
 	- camlimages <unfixed> (low)
+	- advi <unfixed> (low; bug #551282)
 CVE-2009-3295
 	RESERVED
 CVE-2009-3294 (The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11, when ...)
@@ -3296,7 +3297,7 @@
 CVE-2009-2660 (Multiple integer overflows in CamlImages 2.2 might allow ...)
 	{DSA-1857-1}
 	- camlimages 1:3.0.1-3 (low; bug #540146)
-	- advi <not-affected> (affected code section not present in advi code copy of camlimages)
+	- advi <unfixed> (low; bug #551282)
 CVE-2009-2657 (nilfs-utils before 2.0.14 installs multiple programs with unnecessary ...)
 	- nilfs2-tools <not-affected> (dh_fixperms removes the setuid and setgid bits from all files)
 CVE-2009-2656 (Unspecified vulnerability in the com.android.phone process in Android ...)