nion at alioth.debian.org
2009-Jan-18 18:01 UTC
[Secure-testing-commits] r10986 - data/CVE
Author: nion Date: 2009-01-18 18:01:55 +0000 (Sun, 18 Jan 2009) New Revision: 10986 Modified: data/CVE/list Log: add xine-lib regressions for lenny Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-01-18 17:52:23 UTC (rev 10985) +++ data/CVE/list 2009-01-18 18:01:55 UTC (rev 10986) @@ -1903,10 +1903,10 @@ [lenny] - xine-lib 1.1.14-4 CVE-2008-5240 (xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an ...) - xine-lib 1.1.16-2 (low; bug #509352) - [lenny] - xine-lib 1.1.14-4 + [lenny] - xine-lib 1.1.14-5 CVE-2008-5239 (xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not ...) - xine-lib 1.1.16-2 (medium; bug #509353) - [lenny] - xine-lib 1.1.14-4 + [lenny] - xine-lib 1.1.14-5 CVE-2008-5238 (Integer overflow in the real_parse_mdpr function in demux_real.c in ...) - xine-lib 1.1.14-3 (low) NOTE: code execution shouldn''t work here as if 0xff will be extended to 0xffffffff