Secure testing commits - Mar 2009 - r11424 - data/CVE

Author: white
Date: 2009-03-17 13:34:04 +0000 (Tue, 17 Mar 2009)
New Revision: 11424

Modified:
   data/CVE/list
Log:
glib2.0 fixed in sid; mark libsoup version in stable as fixed, since this
version uses glib, only oldstable is vulnerable

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-17 13:18:11 UTC (rev 11423)
+++ data/CVE/list	2009-03-17 13:34:04 UTC (rev 11424)
@@ -1387,7 +1387,7 @@
 CVE-2009-0586 (Integer overflow in gst-libs/gst/tag/gstvorbistag.c in vorbistag
in ...)
 	TODO: check
 CVE-2009-0585 (Integer overflow in the soup_base64_encode function in
soup-misc.c in ...)
-	- libsoup <unfixed> (medium; bug #520039)
+	- libsoup 2.2.105-4 (medium; bug #520039)
 CVE-2009-0584
 	RESERVED
 CVE-2009-0583
@@ -7056,7 +7056,7 @@
 CVE-2008-4317
 	RESERVED
 CVE-2008-4316 (Multiple integer overflows in glib/gbase64.c in GLib before 2.20
allow ...)
-	- glib2.0 <unfixed> (medium; bug #520046)
+	- glib2.0 2.20.0-1 (medium; bug #520046)
 CVE-2008-4315 (tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise
Linux ...)
 	NOT-FOR-US: OpenPegasus
 CVE-2008-4314 (smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers
to ...)