From 5d5a9efa11facbeda1019b6113a012cdb6d3eedb Mon Sep 17 00:00:00 2001
From: Nico Golde <nion@debian.org>
Date: Tue, 30 Dec 2008 14:49:43 +0000
Subject: new audiofile issue

git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@10826 e39458fd-73e7-0310-bf30-c45bca0a0e42
---
 data/CVE/list  | 3 +++
 data/DTSA/list | 4 ++++
 2 files changed, 7 insertions(+)

diff --git a/data/CVE/list b/data/CVE/list
index bd15063bab..a9438e3467 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,6 @@
+CVE-2009-XXXX [buffer overflow in libaudiofile]
+	- audiofile <unfixed> (medium; bug #510205)
+	TODO: request CVE id
 CVE-2008-5744 (Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) ...)
 	TODO: check
 CVE-2008-5743 (pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a ...)
diff --git a/data/DTSA/list b/data/DTSA/list
index e5b1c64eea..0df507cb51 100644
--- a/data/DTSA/list
+++ b/data/DTSA/list
@@ -538,3 +538,7 @@
 [December 22nd, 2008] DTSA-181-1 mplayer - arbitrary code execution
 	{CVE-2008-5616 CVE-2008-4610}
 	[lenny] - mplayer 1.0~rc2-17+lenny2
+[December 29th, 2008] DTSA-174-2 uw-imap - serveral vulnerabilities
+	{CVE-2008-5006 CVE-2008-5005 CVE-2008-5514}
+	[lenny] - uw-imap 2007b~dfsg-4+lenny2
+	NOTE: regression fix for DTSA-174-1 + additional patch
-- 
cgit v1.2.3