[Secure-testing-commits] r18623 - data/CVE

Yves-Alexis Perez corsac at alioth.debian.org
Fri Mar 9 07:07:29 UTC 2012


Author: corsac
Date: 2012-03-09 07:07:28 +0000 (Fri, 09 Mar 2012)
New Revision: 18623

Modified:
   data/CVE/list
Log:
add expat CVEs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-03-08 20:54:48 UTC (rev 18622)
+++ data/CVE/list	2012-03-09 07:07:28 UTC (rev 18623)
@@ -725,10 +725,16 @@
 	RESERVED
 CVE-2012-1149
 	RESERVED
+	- expat <unfixed> (unimportant)
+	NOTE: the same hash DoS attack as other languages/bindings
 CVE-2012-1148
+	- expat <unfixed> (unimportant)
+	NOTE: memory leak
 	RESERVED
 CVE-2012-1147
 	RESERVED
+	- expat <unfixed> (unimportant)
+	NOTE: resource leak
 CVE-2012-1146
 	RESERVED
 	- linux-2.6 <unfixed>




More information about the Secure-testing-commits mailing list