[Secure-testing-commits] r20611 - data/CVE

[Thijs Kinkhorst]

Author: thijs
Date: 2012-12-05 10:00:09 +0000 (Wed, 05 Dec 2012)
New Revision: 20611

Modified:
   data/CVE/list
Log:
new mysql issue, 2 nfu


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-12-05 08:37:54 UTC (rev 20610)
+++ data/CVE/list	2012-12-05 10:00:09 UTC (rev 20611)
@@ -1,7 +1,11 @@
+CVE-2012-XXXX [Insecure salt value usage when in the same mysql session]
+	- mysql-5.1 <unfixed>
+	- mysql-5.5 <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=883719
 CVE-2012-6065 (The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the ...)
-	TODO: check
+	NOT-FOR-US: Drupal plugin
 CVE-2012-6064 (Directory traversal vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: CMS Made Simple
 CVE-2012-6063 (Double free vulnerability in the sftp_mkdir function in sftp.c in ...)
 	- libssh 0.5.3-1
 CVE-2012-6062