[Secure-testing-commits] r21601 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Tue Mar 12 22:19:51 UTC 2013


Author: carnil
Date: 2013-03-12 22:19:50 +0000 (Tue, 12 Mar 2013)
New Revision: 21601

Modified:
   data/CVE/list
Log:
add one more fixed version for CVE-2009-3736, graphviz (2.26.3-14), #702436

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-12 22:15:31 UTC (rev 21600)
+++ data/CVE/list	2013-03-12 22:19:50 UTC (rev 21601)
@@ -53127,6 +53127,7 @@
 	NOTE: the dlopened path is always below /usr/lib/heartbeat, which isn't under control of an attacker
 	NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
 	NOTE: might've been fixed earlier
+	- graphviz 2.26.3-14 (bug #702436)
 CVE-2009-3735 (The ActiveScan Installer ActiveX control in as2stubie.dll before ...)
 	NOT-FOR-US: ActiveScan Installer ActiveX control
 CVE-2009-3734 (Unspecified vulnerability in the management console in the S2 Security ...)




More information about the Secure-testing-commits mailing list