[Secure-testing-commits] r18695 - data/CVE

[Luciano Bello]

Author: luciano
Date: 2012-03-17 17:39:33 +0000 (Sat, 17 Mar 2012)
New Revision: 18695

Modified:
   data/CVE/list
Log:
Asterisk and systemd issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-03-17 16:56:47 UTC (rev 18694)
+++ data/CVE/list	2012-03-17 17:39:33 UTC (rev 18695)
@@ -996,10 +996,14 @@
 	RESERVED
 CVE-2012-1185
 	RESERVED
-CVE-2012-1184
+CVE-2012-1184 [Asterisk: Stack Buffer Overflow in HTTP Manager]
 	RESERVED
-CVE-2012-1183
+	- asterisk <unfixed> (bug #664411)
+	NOTE: http://www.openwall.com/lists/oss-security/2012/03/16/10
+CVE-2012-1183 [Asterisk: Remote Crash Vulnerability in Milliwatt Application]
 	RESERVED
+	- asterisk <unfixed> (bug #664411)
+	NOTE: http://www.openwall.com/lists/oss-security/2012/03/16/10
 CVE-2012-1182
 	RESERVED
 CVE-2012-1181
@@ -1029,8 +1033,11 @@
 	RESERVED
 	- gnash 0.8.10-5 (bug #664023)
 	NOTE: http://www.openwall.com/lists/oss-security/2012/03/14/5
-CVE-2012-1174
+CVE-2012-1174 [systemd: TOCTOU race condition by removing user session]
 	RESERVED
+	- systemd <unfixed> (bug #664364)
+	TODO: Evaluate severity
+	NOTE: http://www.openwall.com/lists/oss-security/2012/03/16/21
 CVE-2012-1173
 	RESERVED
 CVE-2012-1172 [PHP 5.3.x Corrupted $_FILES indices lead to security concern]