[Secure-testing-commits] r19734 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2012-07-13 10:31:17 +0000 (Fri, 13 Jul 2012)
New Revision: 19734

Modified:
   data/CVE/list
Log:
New libexif issues CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841, CVE-2012-2845

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-07-12 21:14:21 UTC (rev 19733)
+++ data/CVE/list	2012-07-13 10:31:17 UTC (rev 19734)
@@ -2476,6 +2476,11 @@
 	RESERVED
 CVE-2012-2845
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	TODO: check if Debian is affected
+	NOTE: Marcus Meissner said CVE-2012-2845 is actually for "exif", the commandline tool. Not the library libexif
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2844
 	RESERVED
 	- chromium-browser <unfixed>
@@ -2487,16 +2492,28 @@
 	- chromium-browser <unfixed>
 CVE-2012-2841
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2840
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2839
 	RESERVED
 CVE-2012-2838
 	RESERVED
 CVE-2012-2837
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2836
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2835
 	RESERVED
 CVE-2012-2834 (Integer overflow in Google Chrome before 20.0.1132.43 allows remote ...)
@@ -2541,10 +2558,19 @@
 	- chromium-browser 20.0.1132.43~r143823-1
 CVE-2012-2814
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2813
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2812
 	RESERVED
+	- libexif <unfixed> (bug #681454)
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=771229
+	NOTE: http://seclists.org/oss-sec/2012/q3/74
 CVE-2012-2811
 	RESERVED
 CVE-2012-2810