Secure testing commits - Dec 2008 - r10667 - data/CVE

Author: nion
Date: 2008-12-09 21:25:43 +0000 (Tue, 09 Dec 2008)
New Revision: 10667

Modified:
   data/CVE/list
Log:
CVE-2008-5235 fixed in xine-lib 1.1.14-3
CVE-2008-5234 unfixed (xine-lib)


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-09 21:14:13 UTC (rev 10666)
+++ data/CVE/list	2008-12-09 21:25:43 UTC (rev 10667)
@@ -383,9 +383,9 @@
 CVE-2008-5236 (Multiple heap-based buffer overflows in xine-lib 1.1.12, and
other ...)
 	TODO: check
 CVE-2008-5235 (Heap-based buffer overflow in the demux_real_send_chunk function
in ...)
-	TODO: check
+	- xine-lib 1.1.14-3
 CVE-2008-5234 (Multiple heap-based buffer overflows in xine-lib 1.1.12, and
other ...)
-	- xine-lib 1.1.14-3
+	- xine-lib <unfixed> (medium; bug #508313; bug #498243)
 CVE-2008-5233 (xine-lib 1.1.12, and other versions before 1.1.15, does not
check for ...)
 	- xine-lib 1.1.14-3 (low)
 CVE-2008-5232 (Buffer overflow in the CallHTMLHelp method in the Microsoft
Windows ...)