Author: nion Date: 2009-05-11 16:46:29 +0000 (Mon, 11 May 2009) New Revision: 11871 Modified: data/CVE/list Log: CVE-2009-1513/CVE-2009-1438 fixed in libmodplug 1:0.8.7-1 Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-05-11 01:17:17 UTC (rev 11870) +++ data/CVE/list 2009-05-11 16:46:29 UTC (rev 11871) @@ -184,7 +184,7 @@ NOTE: http://hg.moinmo.in/moin/1.8/rev/269a1fbc3ed7 NOTE: CVE id requested CVE-2009-1513 (Buffer overflow in the PATinst function in src/load_pat.cpp in ...) - - libmodplug <unfixed> (medium; bug #526084) + - libmodplug 1:0.8.7-1 (medium; bug #526084) - gst-plugins-bad0.10 <not-affected> (Vulnerable code not present; bug #527077) [etch] - libmodplug <not-affected> (Vulnerable code not present) NOTE: gst-plugins-bad0.10 in testing and unstable builds against an external libmodplug. @@ -454,7 +454,7 @@ - linux-2.6 <unfixed> - linux-2.6.24 <removed> CVE-2009-1438 (Integer overflow in the CSoundFile::ReadMed function ...) - - libmodplug <unfixed> (low; bug #526657; bug #527076) + - libmodplug 1:0.8.7-1 (low; bug #526657; bug #527076) - gst-plugins-bad0.10 <not-affected> (it builds against an external libmodplug; bug #527075) [etch] - gst-plugins-bad0.10 <unfixed> (low; bug #527075) [lenny] - gst-plugins-bad0.10 <unfixed> (low; bug #527075)