[Secure-testing-commits] r19019 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2012-04-20 06:45:26 +0000 (Fri, 20 Apr 2012)
New Revision: 19019

Modified:
   data/CVE/list
Log:
one csound issue fixed, the others: unknown


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-20 05:55:43 UTC (rev 19018)
+++ data/CVE/list	2012-04-20 06:45:26 UTC (rev 19019)
@@ -369,12 +369,15 @@
 CVE-2012-2108
 	RESERVED
 	- csound <unfixed> (bug #661197)
+	TODO: check if they were actually fixed
 CVE-2012-2107
 	RESERVED
 	- csound <unfixed> (bug #661197)
+	TODO: check if they were actually fixed
 CVE-2012-2106
 	RESERVED
 	- csound <unfixed> (bug #661197)
+	TODO: check if they were actually fixed
 CVE-2012-2105
 	RESERVED
 	NOT-FOR-US: tsheetx
@@ -1666,7 +1669,8 @@
 CVE-2012-1559
 	RESERVED
 CVE-2012-1558 (yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of ...)
-	TODO: check
+	- cyassl <itp> (bug #598391)
+	NOTE: https://github.com/cyassl/cyassl/commit/6b77c8967aa34f2a0bae85e90a469c4170cb2bb1
 CVE-2012-1557 (SQL injection vulnerability in admin/plib/api-rpc/Agent.php in ...)
 	NOT-FOR-US: Parallels Plesk Panel
 CVE-2012-1556
@@ -4902,8 +4906,7 @@
 	RESERVED
 CVE-2012-0270 [csound buffer overflows]
 	RESERVED
-	- csound <unfixed> (bug #661197)
-	NOTE: Fixed upstream in 5.16.6
+	- csound 1:5.16.6~dfsg-1 (bug #661197)
 	NOTE: http://secunia.com/secunia_research/2012-3/
 	NOTE: http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git;a=commitdiff;h=7d617a9551fb6c552ba16874b71266fcd90f3a6f
 CVE-2012-0269