Author: carnil
Date: 2015-01-23 18:30:13 +0000 (Fri, 23 Jan 2015)
New Revision: 31617
Modified:
data/CVE/list
Log:
Add bug reference for vorbis-tools, #776086
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-01-23 18:20:11 UTC (rev 31616)
+++ data/CVE/list 2015-01-23 18:30:13 UTC (rev 31617)
@@ -262,15 +262,15 @@
- xymon <unfixed> (bug #776007)
TODO: check
CVE-2014-9638 [Oggenc division by zero issue]
- - vorbis-tools <unfixed>
+ - vorbis-tools <unfixed> (bug #776086)
- opus-tools <unfixed>
NOTE: https://trac.xiph.org/ticket/2137
CVE-2014-9639 [Oggenc channel integer overflow]
- - vorbis-tools <unfixed>
+ - vorbis-tools <unfixed> (bug #776086)
- opus-tools <unfixed>
NOTE: https://trac.xiph.org/ticket/2136
CVE-2014-9640 [segfault when trying to encode trivial raw input]
- - vorbis-tools <unfixed>
+ - vorbis-tools <unfixed> (bug #776086)
NOTE: https://trac.xiph.org/ticket/2009
NOTE: Upstream fix: https://trac.xiph.org/changeset/19117
CVE-2014-XXXX [Bug 26437 - prevent /api/* from returning text/html error
messages which could act as an XSS vector]
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
