[Secure-testing-commits] r19838 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-07-31 10:08:53 +0000 (Tue, 31 Jul 2012)
New Revision: 19838

Modified:
   data/CVE/list
Log:
new dokuwiki issue (no-dsa)
new transmission issue
new wireshark issue (not in stable)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-07-31 08:42:40 UTC (rev 19837)
+++ data/CVE/list	2012-07-31 10:08:53 UTC (rev 19838)
@@ -62,6 +62,7 @@
 	RESERVED
 CVE-2012-4037
 	RESERVED
+	- transmission <unfixed> (bug #683380)
 CVE-2012-4036
 	RESERVED
 CVE-2012-4035
@@ -71,7 +72,8 @@
 CVE-2012-4050 (Multiple unspecified vulnerabilities in Google Chrome OS before ...)
 	NOT-FOR-US: Google Chrome OS
 CVE-2012-4049 (epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x ...)
-	TODO: Check if Debian wireshark is affected
+	- wireshark <unfixed>
+	[squeeze] - wireshark <not-affected> (Vulnerable code not present)
 	NOTE: http://www.wireshark.org/security/wnpa-sec-2012-12.html
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/24/1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/24/2
@@ -9252,11 +9254,12 @@
 CVE-2012-0285 (Multiple cross-site scripting (XSS) vulnerabilities in Stoneware ...)
 	NOT-FOR-US: Stoneware webNetwork
 CVE-2012-0284 (Stack-based buffer overflow in the SetSource method in the Cisco ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2012-0283 (Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList ...)
-	TODO: check
+	- dokuwiki <unfixed> (low; bug #683378)
+	[squeeze] - dokuwiki <no-dsa> (Minor issue)
 CVE-2012-0282 (Heap-based buffer overflow in XnView before 1.99 allows remote ...)
-	TODO: check
+	NOT-FOR-US: XnView
 CVE-2012-0281
 	RESERVED
 CVE-2012-0280