[Secure-testing-commits] r19044 - data/CVE

Moritz Muehlenhoff jmm at alioth.debian.org
Mon Apr 23 18:57:40 UTC 2012


Author: jmm
Date: 2012-04-23 18:57:39 +0000 (Mon, 23 Apr 2012)
New Revision: 19044

Modified:
   data/CVE/list
Log:
new asterisk issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-23 17:22:50 UTC (rev 19043)
+++ data/CVE/list	2012-04-23 18:57:39 UTC (rev 19044)
@@ -1,3 +1,9 @@
+CVE-2012-2416
+	- asterisk <unfixed>
+CVE-2012-2415
+	- asterisk <unfixed>
+CVE-2012-2414
+	- asterisk <unfixed>
 CVE-2012-2398 (Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ...)
 	TODO: check
 CVE-2012-2397 (Cross-site request forgery (CSRF) vulnerability in ownCloud 3.0.2 ...)
@@ -1638,7 +1644,7 @@
 	RESERVED
 CVE-2012-1663 (Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows ...)
 	- gnutls28 3.0.14-1
-	NOTE: only GNUTLS 3.0 is affected
+	- gnutls26 <not-affected> (only GNUTLS 3.0 is affected)
 CVE-2012-1662 (CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through ...)
 	NOT-FOR-US: CA ARCserve Backup
 CVE-2012-1661




More information about the Secure-testing-commits mailing list