[Secure-testing-commits] r20820 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2013-01-05 09:14:18 +0000 (Sat, 05 Jan 2013)
New Revision: 20820

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-05 08:35:55 UTC (rev 20819)
+++ data/CVE/list	2013-01-05 09:14:18 UTC (rev 20820)
@@ -3563,6 +3563,7 @@
 	- owncloud 4.0.8debian-1.3 (bug #696574)
 	[wheezy] - owncloud 4.0.4debian2-3.2
 CVE-2012-5664 (SQL injection vulnerability in the Authlogic gem for Ruby on Rails ...)
+	{DSA-2597-1}
 	- ruby-activerecord-3.2 3.2.6-3
 	- ruby-activerecord-2.3 2.3.14-3
 	- rails 2.3.14.1
@@ -3927,6 +3928,7 @@
 	RESERVED
 	- gnome-system-log <not-affected> (Fedora-specific issue)
 CVE-2012-5534 (The hook_process function in the plugin API for WeeChat 0.3.0 through ...)
+	{DSA-2598-1}
 	- weechat 0.3.9.2-1
 	[wheezy] - weechat 0.3.8-1+deb7u1
 CVE-2012-5533 (The http_request_split_value function in request.c in lighttpd 1.4.32 ...)
@@ -28735,6 +28737,7 @@
 	[lenny] - mutt <no-dsa> (Minor issue)
 	NOTE: http://dev.mutt.org/trac/ticket/3506
 CVE-2011-1428 (Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does ...)
+	{DSA-2598-1}
 	- weechat 0.3.5-1
 CVE-2011-1427 (Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite ...)
 	NOT-FOR-US: Kodak InSite