[Secure-testing-commits] r22891 - in data: CVE DSA

Moritz Muehlenhoff jmm at alioth.debian.org
Wed Jul 10 06:09:10 UTC 2013


Author: jmm
Date: 2013-07-10 06:09:10 +0000 (Wed, 10 Jul 2013)
New Revision: 22891

Modified:
   data/CVE/list
   data/DSA/list
Log:
otrs updates
vlc issue is rather in ffmpeg/libav


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-10 06:02:22 UTC (rev 22890)
+++ data/CVE/list	2013-07-10 06:09:10 UTC (rev 22891)
@@ -3309,9 +3309,12 @@
 	RESERVED
 CVE-2013-3245
 	RESERVED
-	- vlc <unfixed>
-	TODO: check
+	- libav 6:0.8.6-1 (bug #703200)
+	- ffmpeg <removed>
+	NOTE: ffmpeg commit: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=e70c5b034c4787377e82cab2d5565486baec0c2a
+	NOTE: libav commit: http://git.libav.org/?p=libav.git;a=commit;h=e70c5b034c4787377e82cab2d5565486baec0c2a
 	NOTE: http://secunia.com/blog/372/
+	NOTE: http://www.jbkempf.com/blog/post/2013/More-lies-from-Secunia
 CVE-2013-3244
 	RESERVED
 CVE-2013-3243
@@ -36925,8 +36928,7 @@
 CVE-2011-2386 (VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey ...)
 	NOT-FOR-US: VisiWave Site Survey
 CVE-2011-2385 (The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in ...)
-	- otrs2 3.0.9+dfsg1-1
-	[lenny] - otrs2 <not-affected> (does not include iPhoneHandle package)
+	- otrs2 <not-affected> (does not include iPhoneHandle package)
 CVE-2011-2384
 	RESERVED
 CVE-2011-2381 (CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x ...)

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2013-07-10 06:02:22 UTC (rev 22890)
+++ data/DSA/list	2013-07-10 06:09:10 UTC (rev 22891)
@@ -593,7 +593,7 @@
 	{CVE-2012-3527 CVE-2012-3528 CVE-2012-3529 CVE-2012-3530 CVE-2012-3531}
 	[squeeze] - typo3-src 4.3.9+dfsg1-1+squeeze5
 [30 Aug 2012] DSA-2536-1 otrs2 - cross-site scripting
-	{CVE-2012-2582}
+	{CVE-2012-2582 CVE-2012-4600}
 	[squeeze] - otrs2 2.4.9+dfsg1-3+squeeze3
 [29 Aug 2012] DSA-2535-1 rtfm - cross-site scripting
 	{CVE-2012-2768}




More information about the Secure-testing-commits mailing list