[Secure-testing-commits] r20014 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-08-23 08:01:01 +0000 (Thu, 23 Aug 2012)
New Revision: 20014

Modified:
   data/CVE/list
Log:
one phpmyadmin issue was split off


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-08-23 07:58:13 UTC (rev 20013)
+++ data/CVE/list	2012-08-23 08:01:01 UTC (rev 20014)
@@ -39,7 +39,8 @@
 CVE-2012-4580 (Cross-site scripting (XSS) vulnerability in McAfee Email and Web ...)
 	TODO: check
 CVE-2012-4579 (Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin ...)
-	TODO: check
+	- phpmyadmin 4:3.4.11.1-1
+	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
 CVE-2012-4578 (The geli encryption provider 7 before r239184 on FreeBSD 10 uses a ...)
 	TODO: check
 CVE-2012-4577 (The Linux firmware image on (1) Korenix Jetport 5600 series ...)
@@ -2337,6 +2338,7 @@
 	RESERVED
 CVE-2012-3503
 	RESERVED
+	NOT-FOR-US: Katello
 CVE-2012-3502 [mod_proxy_ajp, mod_proxy_http: Fix an issue in back end connection closing which could lead to privacy issues due to a response mixuto a response mixup]
 	RESERVED
 	- apache2 <not-affected> (Only affects 2.4 from experimental)