[Secure-testing-commits] r19324 - data/CVE

Sat May 26 09:25:27 UTC 2012

Author: jmm
Date: 2012-05-26 09:25:26 +0000 (Sat, 26 May 2012)
New Revision: 19324

Modified:
   data/CVE/list
Log:
sudo fixed
new libv8 issues
NFUs


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2012-05-26 07:53:56 UTC (rev 19323)
+++ data/CVE/list	2012-05-26 09:25:26 UTC (rev 19324)
@@ -11,17 +11,17 @@
 CVE-2012-2929
 	RESERVED
 CVE-2011-5091 (Multiple SQL injection vulnerabilities in GR Board (aka grboard) ...)
-	TODO: check
+	NOT-FOR-US: GR Board
 CVE-2011-5090 (GR Board (aka grboard) 1.8.6.5 Community Edition does not require ...)
-	TODO: check
+	NOT-FOR-US: GR Board
 CVE-2012-2928 (The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for ...)
-	TODO: check
+	NOT-FOR-US: JIRA plugin
 CVE-2012-2927 (The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and ...)
 	TODO: check
 CVE-2012-2926 (Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before ...)
-	TODO: check
+	NOT-FOR-US: Atlassian JIRA
 CVE-2012-2925 (SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 ...)
-	TODO: check
+	NOT-FOR-US: Simple PHP Agenda
 CVE-2012-2924 (PHP remote file inclusion vulnerability in admin/setup.inc.php in ...)
 	TODO: check
 CVE-2012-2923 (SQL injection vulnerability in news.php4 in Hypermethod eLearning ...)
@@ -62,9 +62,9 @@
 CVE-2012-2906 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
 	TODO: check
 CVE-2012-2905 (Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable ...)
-	TODO: check
+	NOT-FOR-US: Artiphp CMS
 CVE-2012-2904 (player.swf in LongTail JW Player 5.9 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: LongTail JW Player
 CVE-2012-2903 (Multiple cross-site scripting (XSS) vulnerabilities in PHP Address ...)
 	TODO: check
 CVE-2012-2902 (Unrestricted file upload vulnerability in ...)
@@ -744,7 +744,7 @@
 CVE-2012-2568
 	RESERVED
 CVE-2012-2567 (The Xelex MobileTrack application 2.3.7 and earlier for Android uses ...)
-	TODO: check
+	NOT-FOR-US: Xelex MobileTrack application
 CVE-2012-2566
 	RESERVED
 CVE-2012-2565
@@ -754,9 +754,9 @@
 CVE-2012-2563
 	RESERVED
 CVE-2012-2562 (The Xelex MobileTrack application 2.3.7 and earlier for Android does ...)
-	TODO: check
+	NOT-FOR-US: Xelex MobileTrack application
 CVE-2012-2561 (HP Business Service Management (BSM) 9.12 does not properly restrict ...)
-	TODO: check
+	NOT-FOR-US: HP Business Service Management
 CVE-2012-2560
 	RESERVED
 CVE-2012-2559
@@ -1065,7 +1065,7 @@
 CVE-2012-2407
 	RESERVED
 CVE-2012-2406 (RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 ...)
-	TODO: check
+	NOT-FOR-US: RealPlayer
 CVE-2012-2405 (Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement ...)
 	- gallery2 <undetermined>
 CVE-2012-2404 (wp-comments-post.php in WordPress before 3.3.2 supports offsite ...)
@@ -1425,7 +1425,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2012/05/11/1
 CVE-2012-2337 (sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does ...)
 	{DSA-2478-1}
-	- sudo <unfixed> (bug #673766)
+	- sudo 1.8.3p2-1.1 (bug #673766)
 CVE-2012-2336 (sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when ...)
 	- php5 5.4.3 (unimportant)
 	NOTE: Rather harmless bug
@@ -1485,7 +1485,6 @@
 CVE-2012-2318 [Improper validation of incoming plaintext messages in MSN protocol plug-in]
 	RESERVED
 	- pidgin 2.10.4-1
-	[squeeze] - pidgin <unfixed>
 	TODO: check
 CVE-2012-2317 [php5 crypt() empty salt issue]
 	RESERVED
@@ -1734,7 +1733,6 @@
 CVE-2012-2214 [XMPP remote crash]
 	RESERVED
 	- pidgin 2.10.4-1
-	[squeeze] - pidgin <unfixed>
 	TODO: check
 	NOTE: http://www.pidgin.im/news/security/?id=62
 CVE-2012-2213 (** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the ...)
@@ -2277,7 +2275,7 @@
 CVE-2012-2011
 	RESERVED
 CVE-2012-2010 (The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha ...)
-	TODO: check
+	NOT-FOR-US: OpenVMS
 CVE-2012-2009 (Unspecified vulnerability in HP Performance Insight for Networks ...)
 	NOT-FOR-US: HP Performance Insight
 CVE-2012-2008 (Cross-site scripting (XSS) vulnerability in HP Performance Insight for ...)
@@ -13060,7 +13058,7 @@
 CVE-2011-3116
 	RESERVED
 CVE-2011-3115 (Google V8, as used in Google Chrome before 19.0.1084.52, allows remote ...)
-	TODO: check
+	- libv8 <unfixed>
 CVE-2011-3114 (Multiple buffer overflows in the PDF functionality in Google Chrome ...)
 	TODO: check
 CVE-2011-3113 (The PDF functionality in Google Chrome before 19.0.1084.52 does not ...)
@@ -13068,7 +13066,7 @@
 CVE-2011-3112 (Use-after-free vulnerability in the PDF functionality in Google Chrome ...)
 	TODO: check
 CVE-2011-3111 (Google V8, as used in Google Chrome before 19.0.1084.52, allows remote ...)
-	TODO: check
+	- libv8 <unfixed>
 CVE-2011-3110 (The PDF functionality in Google Chrome before 19.0.1084.52 allows ...)
 	TODO: check
 CVE-2011-3109 (Google Chrome before 19.0.1084.52 on Linux does not properly perform a ...)
@@ -13084,7 +13082,7 @@
 CVE-2011-3104 (Skia, as used in Google Chrome before 19.0.1084.52, allows remote ...)
 	TODO: check
 CVE-2011-3103 (Google V8, as used in Google Chrome before 19.0.1084.52, does not ...)
-	TODO: check
+	- libv8 <unfixed>
 CVE-2011-3102 (Off-by-one error in libxml2, as used in Google Chrome before ...)
 	{DSA-2479-1}
 	- libxml2 <unfixed>


