[Secure-testing-commits] r19227 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2012-05-12 08:37:29 +0000 (Sat, 12 May 2012)
New Revision: 19227

Modified:
   data/CVE/list
Log:
Added details for gelette CVE-2012-2338 (NFU)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-05-12 07:54:57 UTC (rev 19226)
+++ data/CVE/list	2012-05-12 08:37:29 UTC (rev 19227)
@@ -710,8 +710,13 @@
 	RESERVED
 CVE-2012-2339
 	RESERVED
-CVE-2012-2338
+CVE-2012-2338 [galette SQL injection]
 	RESERVED
+	NOT-FOR-US: Galette
+	NOTE: http://redmine.ulysses.fr/issues/250
+	NOTE: http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba
+	NOTE: http://www.openwall.com/lists/oss-security/2012/05/10/5
+	NOTE: http://www.openwall.com/lists/oss-security/2012/05/11/1
 CVE-2012-2337
 	RESERVED
 CVE-2012-2336 (sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when ...)