[Secure-testing-commits] r36398 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-09-01 06:07:43 +0000 (Tue, 01 Sep 2015)
New Revision: 36398

Modified:
   data/CVE/list
Log:
Add libvdpau issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-01 05:31:53 UTC (rev 36397)
+++ data/CVE/list	2015-09-01 06:07:43 UTC (rev 36398)
@@ -3766,12 +3766,21 @@
 	NOT-FOR-US: Satellite6
 CVE-2015-5201
 	RESERVED
-CVE-2015-5200
+CVE-2015-5200 [vulnerability in trace functionality]
 	RESERVED
-CVE-2015-5199
+	- libvdpau <unfixed>
+	NOTE: http://lists.x.org/archives/xorg-announce/2015-August/002630.html
+	TODO: check
+CVE-2015-5199 [directory traversal in dlopen]
 	RESERVED
-CVE-2015-5198
+	- libvdpau <unfixed>
+	NOTE: http://lists.x.org/archives/xorg-announce/2015-August/002630.html
+	TODO: check
+CVE-2015-5198 [incorrect check for security transition]
 	RESERVED
+	- libvdpau <unfixed>
+	NOTE: http://lists.x.org/archives/xorg-announce/2015-August/002630.html
+	TODO: check
 CVE-2015-5197
 	RESERVED
 CVE-2015-5196 [config command can be used to set the pidfile and drift file paths]