[Secure-testing-commits] r19050 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-04-24 09:39:51 +0000 (Tue, 24 Apr 2012)
New Revision: 19050

Modified:
   data/CVE/list
Log:
one asterisk issue not in squeeze
filed bug for rubygems (not in stable)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-24 09:36:54 UTC (rev 19049)
+++ data/CVE/list	2012-04-24 09:39:51 UTC (rev 19050)
@@ -1,5 +1,6 @@
-CVE-2012-2416
+CVE-2012-2416 [http://downloads.asterisk.org/pub/security/AST-2012-006.html]
 	- asterisk <unfixed> (bug #670180)
+	[squeeze] - asterisk <not-affected> (Vulnerable code not present)
 CVE-2012-2415
 	- asterisk <unfixed> (bug #670180)
 CVE-2012-2414
@@ -576,14 +577,13 @@
 	TODO: check
 CVE-2012-2126
 	RESERVED
-	- rubygems <unfixed>
+	- rubygems <unfixed> (bug #670228)
 CVE-2012-2125
 	RESERVED
-	- rubygems <unfixed>
+	- rubygems <unfixed> (bug #670228)
 CVE-2012-2124
 	RESERVED
-	- squirrelmail <not-affected>
-	NOTE: RedHat-specific
+	- squirrelmail <not-affected> (Incorrect RedHat security update)
 CVE-2012-2123
 	RESERVED
 	- linux-2.6 <unfixed>