[Secure-testing-commits] r18818 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-04-04 06:10:05 +0000 (Wed, 04 Apr 2012)
New Revision: 18818

Modified:
   data/CVE/list
Log:
systemd fixed (not in stable)
new jenkins issues (not in stable)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-03 21:14:26 UTC (rev 18817)
+++ data/CVE/list	2012-04-04 06:10:05 UTC (rev 18818)
@@ -1870,9 +1870,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2012/03/14/5
 CVE-2012-1174 [systemd: TOCTOU race condition by removing user session]
 	RESERVED
-	- systemd <unfixed> (bug #664364)
-	TODO: Evaluate severity
-	NOTE: http://www.openwall.com/lists/oss-security/2012/03/16/21
+	- systemd 44-1 (bug #664364)
 CVE-2012-1173
 	RESERVED
 CVE-2012-1172 [PHP 5.3.x Corrupted $_FILES indices lead to security concern]
@@ -4032,9 +4030,9 @@
 CVE-2012-0326 (The twicca application 0.7.0 through 0.9.30 for Android does not ...)
 	NOT-FOR-US: twicca application for Android
 CVE-2012-0325 (Cross-site scripting (XSS) vulnerability in CloudBees Jenkins before ...)
-	TODO: check
+	- jenkins 1.424.6+dfsg-1
 CVE-2012-0324 (Cross-site scripting (XSS) vulnerability in CloudBees Jenkins before ...)
-	TODO: check
+	- jenkins 1.424.6+dfsg-1
 CVE-2012-0323 (Cross-site scripting (XSS) vulnerability in the Autocomplete plugin ...)
 	NOT-FOR-US: Autocomplete plugin for SquirrelMail
 CVE-2012-0322 (The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for ...)