[Secure-testing-commits] r19621 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2012-06-28 20:21:46 +0000 (Thu, 28 Jun 2012)
New Revision: 19621

Modified:
   data/CVE/list
Log:
Drupal contrib updates CVE-2012-2709, CVE-2012-3802

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-06-28 18:47:13 UTC (rev 19620)
+++ data/CVE/list	2012-06-28 20:21:46 UTC (rev 19621)
@@ -1,3 +1,6 @@
+CVE-2012-3802 [SA-CONTRIB-2012-079 Post Affiliate Pro unspecified read of commisions]
+	TODO: check
+	NOTE: http://www.openwall.com/lists/oss-security/2012/06/27/10
 CVE-2012-3801 (The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not ...)
 	TODO: check
 CVE-2012-3800 (Cross-site scripting (XSS) vulnerability in og.js in the Organic ...)
@@ -2274,7 +2277,8 @@
 CVE-2012-2710 (Cross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x ...)
 	TODO: check
 CVE-2012-2709
-	RESERVED
+	REJECTED
+	NOTE: http://www.openwall.com/lists/oss-security/2012/06/27/10
 CVE-2012-2708 (Cross-site scripting (XSS) vulnerability in the ...)
 	TODO: check
 CVE-2012-2707 (The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does ...)