[Secure-testing-commits] r19565 - data/CVE

Luk Claes
Sat, 23 Jun 2012 15:33:20 -0000

Author: luk
Date: 2012-06-23 15:33:20 +0000 (Sat, 23 Jun 2012)
New Revision: 19565

Modified:
   data/CVE/list
Log:
mark some more libvorbisidec issues as fixed

Modified: data/CVE/list
==================================================================---
data/CVE/list	2012-06-23 15:04:38 UTC (rev 19564)
+++ data/CVE/list	2012-06-23 15:33:20 UTC (rev 19565)
@@ -74646,12 +74646,12 @@
 	NOT-FOR-US: Clever Internet ActiveX Suite
 CVE-2007-4066 (Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0
allow ...)
 	{DSA-1471-1}
-	- libvorbisidec <unfixed> (bug #669196)
+	- libvorbisidec 1.0.2+svn16259-2 (bug #669196)
 	- libvorbis 1.2.0.dfsg-1
 	NOTE: svn revisionsions fixing this:
https://bugzilla.redhat.com/show_bug.cgi?id=249780
 CVE-2007-4065 (lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before
1.2.0 ...)
 	{DSA-1471-1}
-	- libvorbisidec <unfixed> (bug #669196)
+	- libvorbisidec 1.0.2+svn16259-2 (bug #669196)
 	- libvorbis 1.2.0.dfsg-1
 	NOTE: Just an infinite loop in an enduser multimedia libarary, not treated as
a vulnerability
 	NOTE: svn revisionions fixing this:
https://bugzilla.redhat.com/show_bug.cgi?id=249780
@@ -74744,7 +74744,7 @@
 	RESERVED
 CVE-2007-4029 (libvorbis 1.1.2, and possibly other versions before 1.2.0,
allows ...)
 	{DSA-1471-1}
-	- libvorbisidec <unfixed> (bug #669196)
+	- libvorbisidec 1.0.2+svn16259-2 (bug #669196)
 	- libvorbis 1.2.0.dfsg-1 (medium; bug #437916)
 	NOTE: svn revisions fixing this
https://bugzilla.redhat.com/show_bug.cgi?id=249780
 CVE-2007-4028 (Absolute path traversal vulnerability in index.php in Webspell
4.01.02 ...)