[Secure-testing-commits] r19959 - data/CVE

[Florian Weimer]

Author: fw
Date: 2012-08-16 05:56:22 +0000 (Thu, 16 Aug 2012)
New Revision: 19959

Modified:
   data/CVE/list
Log:
CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 CVE-2012-3421: pcp unfixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-08-15 21:14:18 UTC (rev 19958)
+++ data/CVE/list	2012-08-16 05:56:22 UTC (rev 19959)
@@ -1980,14 +1980,18 @@
 	- icedtea-web <unfixed>
 CVE-2012-3422 (The getFirstInTableInstance function in the IcedTea-Web plugin before ...)
 	- icedtea-web <unfixed>
-CVE-2012-3421
+CVE-2012-3421 [pcp: incorrect event-driven programming]
 	RESERVED
-CVE-2012-3420
+	- pcp <unfixed>
+CVE-2012-3420 [pcp: memory leaks]
 	RESERVED
-CVE-2012-3419
+	- pcp <unfixed>
+CVE-2012-3419 [pcp: information disclosure]
 	RESERVED
-CVE-2012-3418
+	- pcp <unfixed>
+CVE-2012-3418 [pcp: multiple integer and heap-based overflows]
 	RESERVED
+	- pcp <unfixed>
 CVE-2012-3417 (The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota ...)
 	- quota 4.00~pre1-1
 	NOTE: this is at least fixed in 4.00, I could not trace this back to an exact version