add mp3gain/mpg123 code copy

planet-venus no-dsa
fix postgresql 8.4 entry for wheezy


git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@26286 e39458fd-73e7-0310-bf30-c45bca0a0e42

5 files changed, 23 insertions, 0 deletions

diff --git a/data/CVE/2003.list b/data/CVE/2003.list
index 593da09344..2853d86aee 100644
--- a/data/CVE/2003.list
+++ b/data/CVE/2003.list
@@ -2152,6 +2152,9 @@ CVE-2003-0578 (cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard link
 	NOT-FOR-US: IBM U2 UniVerse
 CVE-2003-0577 (mpg123 0.59r allows remote attackers to cause a denial of service and ...)
 	- mpg123 0.59r-1
+        - mp3gain 1.5.2-r2-6 (low)
+        [wheezy] - mp3gain <no-dsa> (Minor issue)
+        [squeeze] - mp3gain <no-dsa> (Minor issue)
 CVE-2003-0576 (Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and ...)
 	NOT-FOR-US: IRIX
 CVE-2003-0575 (Heap-based buffer overflow in the name services daemon (nsd) in SGI ...)
diff --git a/data/CVE/2004.list b/data/CVE/2004.list
index 313f703a3c..c1ddd98914 100644
--- a/data/CVE/2004.list
+++ b/data/CVE/2004.list
@@ -3841,6 +3841,9 @@ CVE-2004-0992 (Format string vulnerability in the -a option (daemon mode) in ...
 	NOT-FOR-US: Proxytunnel
 CVE-2004-0991 (Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to ...)
 	- mpg123 0.59r-19
+        - mp3gain 1.5.2-r2-6 (low)
+        [wheezy] - mp3gain <no-dsa> (Minor issue)
+        [squeeze] - mp3gain <no-dsa> (Minor issue)
 CVE-2004-0990 (Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and ...)
 	{DSA-602-1 DSA-601-1 DSA-591-1 DSA-589-1}
 	- libgd2 2.0.30-1
@@ -4324,6 +4327,9 @@ CVE-2004-0806 (cdrecord in the cdrtools package before 2.01, when installed setu
 CVE-2004-0805 (Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s ...)
 	{DSA-564-1}
 	- mpg123 0.59r-16
+        - mp3gain 1.5.2-r2-6 (low)
+        [wheezy] - mp3gain <no-dsa> (Minor issue)
+        [squeeze] - mp3gain <no-dsa> (Minor issue)
 CVE-2004-0804 (Vulnerability in tif_dirread.c for libtiff allows remote attackers to ...)
 	{DSA-567-1}
 	- kdegraphics 3.3.2-1
diff --git a/data/CVE/2006.list b/data/CVE/2006.list
index 64bfc00c92..99647dd312 100644
--- a/data/CVE/2006.list
+++ b/data/CVE/2006.list
@@ -12669,6 +12669,9 @@ CVE-2006-1656 (vserver in util-vserver 0.30.209 executes a command as root when
 CVE-2006-1655 (Multiple buffer overflows in mpg123 0.59r allow user-assisted ...)
 	{DSA-1074-1}
 	- mpg123 0.59r-22 (bug #361863)
+        - mp3gain 1.5.2-r2-6 (low)
+        [wheezy] - mp3gain <no-dsa> (Minor issue)
+        [squeeze] - mp3gain <no-dsa> (Minor issue)
 CVE-2006-1654 (Directory traversal vulnerability in the HP Color LaserJet 2500 ...)
 	NOT-FOR-US: HP Colour LaserJet 2500 and 4600 Toolbox
 CVE-2006-1653 (PHP remote file inclusion vulnerability in loadkernel.php in ...)
diff --git a/data/CVE/2011.list b/data/CVE/2011.list
index 130e537dfd..12632f2e56 100644
--- a/data/CVE/2011.list
+++ b/data/CVE/2011.list
@@ -10921,6 +10921,7 @@ CVE-2011-1158 (Cross-site scripting (XSS) vulnerability in feedparser.py in Univ
 	[squeeze] - feedparser <no-dsa> (Minor issue)
 	[lenny] - feedparser <no-dsa> (Minor issue)
 	- planet-venus <unfixed> (low; bug #684246)
+	[wheezy] - planet-venus <no-dsa> (Minor issue)
 	[squeeze] - planet-venus <no-dsa> (Minor issue)
 	[lenny] - planet-venus <no-dsa> (Minor issue)
 	NOTE: https://code.google.com/p/feedparser/issues/detail?id=255
@@ -10929,6 +10930,7 @@ CVE-2011-1157 (Cross-site scripting (XSS) vulnerability in feedparser.py in Univ
 	[squeeze] - feedparser <no-dsa> (Minor issue)
 	[lenny] - feedparser <no-dsa> (Minor issue)
 	- planet-venus <unfixed> (low; bug #684246)
+	[wheezy] - planet-venus <no-dsa> (Minor issue)
 	[squeeze] - planet-venus <no-dsa> (Minor issue)
 	[lenny] - planet-venus <no-dsa> (Minor issue)
 	NOTE: https://code.google.com/p/feedparser/issues/detail?id=254
@@ -10937,6 +10939,7 @@ CVE-2011-1156 (feedparser.py in Universal Feed Parser (aka feedparser or ...)
 	[squeeze] - feedparser <no-dsa> (Minor issue)
 	[lenny] - feedparser <no-dsa> (Minor issue)
 	- planet-venus <unfixed> (low; bug #684246)
+	[wheezy] - planet-venus <no-dsa> (Minor issue)
 	[squeeze] - planet-venus <no-dsa> (Minor issue)
 	[lenny] - planet-venus <no-dsa> (Minor issue)
 	NOTE: https://code.google.com/p/feedparser/issues/detail?id=91
diff --git a/data/CVE/2014.list b/data/CVE/2014.list
index e32711c41f..399e6464da 100644
--- a/data/CVE/2014.list
+++ b/data/CVE/2014.list
@@ -5525,42 +5525,49 @@ CVE-2014-0067
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0066
 	RESERVED
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0065
 	RESERVED
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0064
 	RESERVED
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0063
 	RESERVED
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0062
 	RESERVED
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0061
 	RESERVED
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <no-dsa> (Minor issue)
 	- postgresql-9.3 9.3.3-1
 	- postgresql-plsh 1.20140221-1
 	[wheezy] - postgresql-plsh <no-dsa> (Minor issue)
@@ -5570,6 +5577,7 @@ CVE-2014-0060
 	{DSA-2865-1 DSA-2864-1}
 	- postgresql-9.1 <removed>
 	- postgresql-8.4 <removed>
+	[wheezy] - postgresql-8.4 <not-affected> (postgresql-8.4 in wheezy only provides PL/Perl)
 	- postgresql-9.3 9.3.3-1
 CVE-2014-0059
 	RESERVED