Author: stef-guest Date: 2007-01-21 22:18:38 +0100 (Sun, 21 Jan 2007) New Revision: 5318 Modified: data/CVE/list Log: - new python-django issues fixed - gstreamer-ffmpeg fixed (previous fix was incomplete) - enigmail fixed - poppler fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-01-21 20:14:08 UTC (rev 5317) +++ data/CVE/list 2007-01-21 21:18:38 UTC (rev 5318) @@ -1,6 +1,8 @@ +CVE-2007-XXXX [python-django several issues] + - python-django 0.95.1-1 (bug #407786; bug #407607) CVE-2007-XXXX [gstreamer-ffmpeg unspecified issue related to sps and pps ids] - - gstreamer0.10-ffmpeg 0.10.1-4 - - gst-ffmpeg 0.8.7-8 + - gstreamer0.10-ffmpeg 0.10.1-5 + - gst-ffmpeg 0.8.7-9 TODO: check other ffmpeg related packages CVE-2007-XXXX [wireshark multiple issues fixed in 0.99.5pre1] - wireshark 0.99.4-4 (low) @@ -642,6 +644,7 @@ CVE-2007-0104 (The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, ...) - kdegraphics <unfixed> (unimportant) - koffice <unfixed> (unimportant) + - poppler 0.4.5-5.1 (unimportant) NOTE: hardly a security issue; if someone sends someone a crafted PDF file triggering NOTE: such an endless loop the user will simply abort kpdf and never look at NOTE: that file again, this is only denial of service by a _very_ far stretch @@ -3191,7 +3194,7 @@ - trac 0.10.1-1 (bug #397683) CVE-2006-5877 [enigmail memory corruption] RESERVED - - enigmail <unfixed> (bug #406604) + - enigmail 2:0.94.2-1 (bug #406604) CVE-2006-5876 (The soup_headers_parse function in soup-headers.c for libsoup HTTP ...) {DSA-1248-1} - libsoup 2.2.98-2 (bug #405197; medium)