[Secure-testing-commits] r17560 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2011-11-06 09:14:21 +0000 (Sun, 06 Nov 2011)
New Revision: 17560

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-11-06 08:35:02 UTC (rev 17559)
+++ data/CVE/list	2011-11-06 09:14:21 UTC (rev 17560)
@@ -1139,10 +1139,12 @@
 CVE-2011-3975 (A certain HTC update for Android 2.3.4 build GRJ22, when the Sense ...)
 	NOT-FOR-US: HTC Android
 CVE-2011-3974 (Integer signedness error in the decode_residual_inter function in ...)
+	{DSA-2336-1}
 	- libav 4:0.7.1-7 (bug #641478)
 	- ffmpeg <removed>
 	- ffmpeg-debian <end-of-life>
 CVE-2011-3973 (cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 ...)
+	{DSA-2336-1}
 	- libav 4:0.7.1-7 (bug #641478)
 	- ffmpeg <removed>
 	- ffmpeg-debian <end-of-life>
@@ -2278,6 +2280,7 @@
 CVE-2011-3505
 	RESERVED
 CVE-2011-3504 (The Matroska format decoder in FFmpeg before 0.8.3 does not properly ...)
+	{DSA-2336-1}
 	- libav 4:0.7.2-1 (bug #643859)
 	- ffmpeg <removed>
 	- ffmpeg-debian <end-of-life>
@@ -2660,6 +2663,7 @@
 	[squeeze] - linux-2.6 2.6.32-34
 	[lenny] - linux-2.6 <not-affected> (vulnerability introduced in commit 1bfe73c2)
 CVE-2011-3362 (Integer signedness error in the decode_residual_block function in ...)
+	{DSA-2336-1}
 	- libav 4:0.7.1-7 (bug #641478)
 	- ffmpeg <removed>
 	- ffmpeg-debian <end-of-life>
@@ -2921,6 +2925,7 @@
 CVE-2011-3263 (zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows ...)
 	- zabbix 1:1.8.6-1
 CVE-2011-3262 (tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 ...)
+	{DSA-2337-1}
 	- xen 4.1.1-1
 	- xen-3 <removed>
 	[lenny] - xen-3 <no-dsa> (Minor issue; only marginally affected)
@@ -6744,6 +6749,7 @@
 CVE-2011-1899 (Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth ...)
 	NOT-FOR-US: CA eHealth
 CVE-2011-1898 (Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough ...)
+	{DSA-2337-1}
 	- xen 4.1.1-1
 	[lenny] - xen-3 <not-affected>
 CVE-2011-1897 (Cross-site scripting (XSS) vulnerability in Microsoft Forefront ...)
@@ -7638,6 +7644,7 @@
 CVE-2011-1584 (The updateFile function in inc/core/class.dc.media.php in the Media ...)
 	- dotclear <not-affected> (Fixed before initial upload to archive)
 CVE-2011-1583 (Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in ...)
+	{DSA-2337-1}
 	- xen 4.1.1-1
 	- xen-3 <removed>
 	[lenny] - xen-3 <no-dsa> (Minor issue; only marginally affected)
@@ -8921,6 +8928,7 @@
 	- tiff 3.9.4-9 (bug #619614)
 CVE-2011-1166
 	RESERVED
+	{DSA-2337-1}
 	- xen 4.1.0-1
 	- xen-3 <removed>
 CVE-2011-1165