[Secure-testing-commits] r31590 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Jan 22 05:29:23 UTC 2015


Author: carnil
Date: 2015-01-22 05:29:22 +0000 (Thu, 22 Jan 2015)
New Revision: 31590

Modified:
   data/CVE/list
Log:
Add fixed version for vlc upload

TODO/NOTE: only a part of the CVE assigned corrected? Needs to be
double-checked if other are maybe not-affected.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-22 04:19:13 UTC (rev 31589)
+++ data/CVE/list	2015-01-22 05:29:22 UTC (rev 31590)
@@ -298,23 +298,23 @@
 	- vlc <unfixed> (bug #775866)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 CVE-2014-9630 [Invalid memory access in rtp code]
-	- vlc <unfixed> (bug #775866)
+	- vlc 2.2.0~rc2-2 (bug #775866)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://github.com/videolan/vlc/commit/204291467724867b79735c0ee3aeb0dbc2200f97
 CVE-2014-9629 [integer overflow with resultant buffer overflow]
-	- vlc <unfixed> (bug #775866)
+	- vlc 2.2.0~rc2-2 (bug #775866)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://github.com/videolan/vlc/commit/9bb0353a5c63a7f8c6fc853faa3df4b4df1f5eb5
 CVE-2014-9628 [attacker-triggered zero-size malloc with resultant buffer overflow]
-	- vlc <unfixed> (bug #775866)
+	- vlc 2.2.0~rc2-2 (bug #775866)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39
 CVE-2014-9627 [integer truncation on 32-bit platforms]
-	- vlc <unfixed> (bug #775866)
+	- vlc 2.2.0~rc2-2 (bug #775866)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39
 CVE-2014-9626 [integer underflow]
-	- vlc <unfixed> (bug #775866)
+	- vlc 2.2.0~rc2-2 (bug #775866)
 	[squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39
 CVE-2014-9625 [Buffer overflow in updater]




More information about the Secure-testing-commits mailing list