[Secure-testing-commits] r27646 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2014-07-08 09:14:12 +0000 (Tue, 08 Jul 2014)
New Revision: 27646

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-07-08 08:50:36 UTC (rev 27645)
+++ data/CVE/list	2014-07-08 09:14:12 UTC (rev 27646)
@@ -2585,7 +2585,7 @@
 CVE-2014-3541
 	RESERVED
 CVE-2014-3540 [Class loader vulnerability in DefaultResolver]
-	REJECTED
+	RESERVED
 CVE-2014-3539
 	RESERVED
 CVE-2014-3538 (file before 5.19 does not properly restrict the amount of data read ...)
@@ -19142,6 +19142,7 @@
 	- rails <not-affected> (Only affects 3.x)
 	NOTE: Starting with 2.3.14.1 rails is a transition package
 CVE-2013-4388 (Buffer overflow in the mp4a packetizer ...)
+	{DSA-2973-1}
 	- vlc 2.1.0-1 (bug #726528)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: http://git.videolan.org/?p=vlc.git;a=commitdiff;h=9794ec1cd268c04c8bca13a5fae15df6594dff3e
@@ -25650,6 +25651,7 @@
 CVE-2013-1955 (Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php ...)
 	NOT-FOR-US: Easy PHP Calendar
 CVE-2013-1954 (The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player ...)
+	{DSA-2973-1}
 	- vlc 2.0.6-1 (bug #705136)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: http://www.videolan.org/security/sa1302.html
@@ -25932,6 +25934,7 @@
 CVE-2013-1869 (CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and ...)
 	NOT-FOR-US: Red Hat Satellite
 CVE-2013-1868 (Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and ...)
+	{DSA-2973-1}
 	- vlc 2.0.5-1
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: http://www.videolan.org/security/sa1301.html