Author: joeyh Date: 2009-11-25 09:14:52 +0000 (Wed, 25 Nov 2009) New Revision: 13373 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-11-24 22:41:52 UTC (rev 13372) +++ data/CVE/list 2009-11-25 09:14:52 UTC (rev 13373) @@ -1719,6 +1719,7 @@ - xulrunner 1.9.1.4-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-3379 (Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla ...) + {DSA-1939-1} - libvorbis 1.2.3-1 (medium) - xulrunner 1.9.1.4-1 [lenny] - xulrunner <not-affected> (Only affects Firefox 3.5) @@ -2271,7 +2272,7 @@ TODO: next point release [lenny] - libjson-ruby 1.1.2-1+lenny1 - lucene2 2.9.1+ds1-2 (unimportant; bug #555225) [etch] - lucene2 <not-affected> (prototype.js not present) - NOTE: prototype.js copy unused per #555225 + NOTE: prototype.js copy unused per #555225 - glpi 0.72.3-1 (low; bug #555228) [etch] - glpi <no-dsa> (minor issue) [lenny] - glpi <no-dsa> (minor issue) @@ -4404,6 +4405,7 @@ - xulrunner 1.9.0.13-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-2663 (libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 ...) + {DSA-1939-1} - libvorbis 1.2.0.dfsg-6 (medium; bug #540958) - xulrunner 1.9.1.2-1 (medium; bug #540961) [etch] - xulrunner <not-affected> (vulnerability introduced in 1.9.1.0)