[Secure-testing-commits] r31617 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-01-23 18:30:13 +0000 (Fri, 23 Jan 2015)
New Revision: 31617

Modified:
   data/CVE/list
Log:
Add bug reference for vorbis-tools, #776086

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-23 18:20:11 UTC (rev 31616)
+++ data/CVE/list	2015-01-23 18:30:13 UTC (rev 31617)
@@ -262,15 +262,15 @@
 	- xymon <unfixed> (bug #776007)
 	TODO: check
 CVE-2014-9638 [Oggenc division by zero issue]
-	- vorbis-tools <unfixed>
+	- vorbis-tools <unfixed> (bug #776086)
 	- opus-tools <unfixed>
 	NOTE: https://trac.xiph.org/ticket/2137
 CVE-2014-9639 [Oggenc channel integer overflow]
-	- vorbis-tools <unfixed>
+	- vorbis-tools <unfixed> (bug #776086)
 	- opus-tools <unfixed>
 	NOTE: https://trac.xiph.org/ticket/2136
 CVE-2014-9640 [segfault when trying to encode trivial raw input]
-	- vorbis-tools <unfixed>
+	- vorbis-tools <unfixed> (bug #776086)
 	NOTE: https://trac.xiph.org/ticket/2009
 	NOTE: Upstream fix: https://trac.xiph.org/changeset/19117
 CVE-2014-XXXX [Bug 26437 - prevent /api/* from returning text/html error messages which could act as an XSS vector]