[Secure-testing-commits] r19290 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-05-22 11:38:28 +0000 (Tue, 22 May 2012)
New Revision: 19290

Modified:
   data/CVE/list
Log:
libxml2 CVEfied
new polarssl issue, doesn't affect stable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-05-21 21:14:25 UTC (rev 19289)
+++ data/CVE/list	2012-05-22 11:38:28 UTC (rev 19290)
@@ -282,10 +282,6 @@
 	RESERVED
 CVE-2012-2759
 	RESERVED
-CVE-2012-XXXX [SA49177]
-	- libxml2 <unfixed>
-	TODO: check
-	NOTE: http://git.gnome.org/browse/libxml2/commit/?id=d8e1faeaa99c7a7c07af01c1c72de352eb590a3e
 CVE-2012-2758
 	RESERVED
 CVE-2012-2757
@@ -1814,6 +1810,8 @@
 	NOTE: http://marc.info/?l=openssl-dev&m=133525318514423&w=2
 CVE-2012-2130
 	RESERVED
+	- polarssl 1.1.2-1
+	[squeeze] - polarssl <not-affected> (Introduced in 0.99-pre4)
 CVE-2012-2129 [dokuwiki doku.php 'target' param xss]
 	RESERVED
 	- dokuwiki 0.0.20120125a-1 (low; bug #670917)
@@ -12957,7 +12955,8 @@
 CVE-2011-3103
 	RESERVED
 CVE-2011-3102 (Off-by-one error in libxml2, as used in Google Chrome before ...)
-	TODO: check
+	- libxml2 <unfixed>
+	NOTE: http://git.gnome.org/browse/libxml2/commit/?id=d8e1faeaa99c7a7c07af01c1c72de352eb590a3e
 CVE-2011-3101 (Google Chrome before 19.0.1084.46 on Linux does not properly mitigate ...)
 	- chromium-browser <unfixed>
 CVE-2011-3100 (Google Chrome before 19.0.1084.46 does not properly draw dash paths, ...)