[Secure-testing-commits] r27695 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2014-07-11 21:14:14 +0000 (Fri, 11 Jul 2014)
New Revision: 27695

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-07-11 14:24:36 UTC (rev 27694)
+++ data/CVE/list	2014-07-11 21:14:14 UTC (rev 27695)
@@ -313,6 +313,7 @@
 	- ffmpeg <end-of-life> (Backports to 0.5.x not useful, too many checks missing)
 CVE-2014-4609
 	RESERVED
+	{DSA-2977-1}
 	- libav 6:10.2-1
 	NOTE: http://git.libav.org/?p=libav.git;a=commit;h=ccda51b14c0fcae2fad73a24872dce75a7964996
 CVE-2014-4608 (** DISPUTED ** Multiple integer overflows in the lzo1x_decompress_safe ...)
@@ -11982,6 +11983,7 @@
 	- foreman <itp> (bug #663101)
 CVE-2014-0191 [external parameter entity loaded when entity substitution is disabled]
 	RESERVED
+	{DSA-2978-1}
 	- libxml2 2.9.1+dfsg1-4 (bug #747309)
 	NOTE: patch: https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df
 CVE-2014-0190 (The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to ...)