[Secure-testing-commits] r18260 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-01-23 15:45:25 +0000 (Mon, 23 Jan 2012)
New Revision: 18260

Modified:
   data/CVE/list
   data/next-point-update.txt
Log:
asterisk fixed, libpar-packer-perl/libpar-perl CVE split

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-01-23 11:42:33 UTC (rev 18259)
+++ data/CVE/list	2012-01-23 15:45:25 UTC (rev 18260)
@@ -202,7 +202,7 @@
 	RESERVED
 CVE-2012-0885 [AST-2012-001 asterisk srtp remote crash]
 	RESERVED
-	- asterisk <unfixed> (bug #656596)
+	- asterisk 1:1.8.8.2~dfsg-1 (bug #656596)
 	[squeeze] - asterisk <not-affected> (Vulnerable code not present)
 	[lenny] - asterisk <not-affected> (Vulnerable code not present)
 	NOTE: AST-2012-001 http://downloads.asterisk.org/pub/security/AST-2012-001.html
@@ -398,7 +398,8 @@
 CVE-2011-5061 (functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x ...)
 	TODO: check
 CVE-2011-5060 (The par_mktmpdir function in the PAR module before 1.003 for Perl ...)
-	TODO: check
+	- libpar-perl 1.005-1 (bug #650707)
+	[squeeze] - libpar-perl <no-dsa> (Minor issue)
 CVE-2010-5082 (Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in ...)
 	TODO: check
 CVE-2010-XXXX [webkit info disclosure/segfault]
@@ -4470,8 +4471,6 @@
 CVE-2011-4114 (The par_mktmpdir function in the PAR::Packer module before 1.012 for ...)
 	- libpar-packer-perl 1.012-1 (bug #650706)
 	[squeeze] - libpar-packer-perl <no-dsa> (Minor issue)
-	- libpar-perl 1.005-1 (bug #650707)
-	[squeeze] - libpar-perl <no-dsa> (Minor issue)
 CVE-2011-4113
 	RESERVED
 	- drupal6-mod-views 2.14-1

Modified: data/next-point-update.txt
===================================================================
--- data/next-point-update.txt	2012-01-23 11:42:33 UTC (rev 18259)
+++ data/next-point-update.txt	2012-01-23 15:45:25 UTC (rev 18260)
@@ -18,6 +18,7 @@
 	[squeeze] - cifs-utils 2:4.5-2+squeeze1
 CVE-2011-4114
 	[squeeze] - libpar-packer-perl 1.006-1+squeeze1
+CVE-2011-5060
 	[squeeze] - libpar-perl 1.000-1+squeeze1
 CVE-2011-1429
 	[squeeze] - mutt 1.5.20-9+squeeze2