Author: gilbert-guest Date: 2009-08-12 05:12:02 +0000 (Wed, 12 Aug 2009) New Revision: 12573 Modified: data/CVE/list Log: new libvorbis issue fixed in unstable (thanks to the quick reaction by the maintainer) Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-08-11 21:14:11 UTC (rev 12572) +++ data/CVE/list 2009-08-12 05:12:02 UTC (rev 12573) @@ -334,7 +334,7 @@ - xulrunner <unfixed> [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-2663 (libvorbis before r16182, as used in Mozilla Firefox before 3.0.13 and ...) - - libvorbis <unfixed> (medium; bug #540958) + - libvorbis 1.2.0.dfsg-6 (medium; bug #540958) - xulrunner <not-affected> (medium; bug #540961) NOTE: vorbis support added in 1.9.0.13 and 1.9.1.0, which have not yet entered the archive TODO: recheck when 1.9.0.13 or 1.9.1.x enter stable/unstable