[Secure-testing-commits] r19304 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2012-05-23 21:14:26 +0000 (Wed, 23 May 2012)
New Revision: 19304

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-05-23 19:25:23 UTC (rev 19303)
+++ data/CVE/list	2012-05-23 21:14:26 UTC (rev 19304)
@@ -1,3 +1,9 @@
+CVE-2012-2928 (The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for ...)
+	TODO: check
+CVE-2012-2927 (The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and ...)
+	TODO: check
+CVE-2012-2926 (Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before ...)
+	TODO: check
 CVE-2012-2925 (SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 ...)
 	TODO: check
 CVE-2012-2924 (PHP remote file inclusion vulnerability in admin/setup.inc.php in ...)
@@ -331,8 +337,8 @@
 CVE-2012-2760
 	RESERVED
 	- libapache2-mod-auth-openid <unfixed> (bug #674165)
-CVE-2012-2759
-	RESERVED
+CVE-2012-2759 (Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the ...)
+	TODO: check
 CVE-2012-2758
 	RESERVED
 CVE-2012-2757
@@ -719,8 +725,8 @@
 	RESERVED
 CVE-2012-2568
 	RESERVED
-CVE-2012-2567
-	RESERVED
+CVE-2012-2567 (The Xelex MobileTrack application 2.3.7 and earlier for Android uses ...)
+	TODO: check
 CVE-2012-2566
 	RESERVED
 CVE-2012-2565
@@ -729,8 +735,8 @@
 	RESERVED
 CVE-2012-2563
 	RESERVED
-CVE-2012-2562
-	RESERVED
+CVE-2012-2562 (The Xelex MobileTrack application 2.3.7 and earlier for Android does ...)
+	TODO: check
 CVE-2012-2561 (HP Business Service Management (BSM) 9.12 does not properly restrict ...)
 	TODO: check
 CVE-2012-2560
@@ -1376,6 +1382,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2012/05/10/5
 	NOTE: http://www.openwall.com/lists/oss-security/2012/05/11/1
 CVE-2012-2337 (sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does ...)
+	{DSA-2478-1}
 	- sudo <unfixed> (bug #673766)
 CVE-2012-2336 (sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when ...)
 	- php5 5.4.3 (unimportant)
@@ -2265,8 +2272,8 @@
 	NOT-FOR-US: CMD Made Simple
 CVE-2012-1991
 	RESERVED
-CVE-2012-1990
-	RESERVED
+CVE-2012-1990 (Multiple cross-site scripting (XSS) vulnerabilities in Schneider ...)
+	TODO: check
 CVE-2012-1989
 	RESERVED
 	- puppet 2.7.13-1
@@ -13038,6 +13045,7 @@
 CVE-2011-3103
 	RESERVED
 CVE-2011-3102 (Off-by-one error in libxml2, as used in Google Chrome before ...)
+	{DSA-2479-1}
 	- libxml2 <unfixed>
 	NOTE: http://git.gnome.org/browse/libxml2/commit/?id=d8e1faeaa99c7a7c07af01c1c72de352eb590a3e
 CVE-2011-3101 (Google Chrome before 19.0.1084.46 on Linux does not properly mitigate ...)