[Secure-testing-commits] r21064 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2013-01-29 09:16:54 +0000 (Tue, 29 Jan 2013)
New Revision: 21064

Modified:
   data/CVE/list
Log:
CVEs assigned for WordPress issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-29 09:14:41 UTC (rev 21063)
+++ data/CVE/list	2013-01-29 09:16:54 UTC (rev 21064)
@@ -70,20 +70,6 @@
 	RESERVED
 CVE-2013-1414
 	RESERVED
-CVE-2013-XXXX [wordpress: server-side request forgery and remote port scanning using pingbacks]
-	- wordpress 3.5.1+dfsg-1 (bug #698916)
-	NOTE: http://wordpress.org/news/2013/01/wordpress-3-5-1/
-	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/25/7
-CVE-2013-XXXX [wordpress: XSS fixed in 3.5.1]
-	- wordpress 3.5.1+dfsg-1 (bug #698927)
-	TODO: check if squeeze is affected
-	NOTE: http://wordpress.org/news/2013/01/wordpress-3-5-1/
-	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/25/7
-CVE-2013-XXXX [wordpress: XSS in external library Plupload fixed in 3.5.1]
-	- wordpress 3.5.1+dfsg-1 (bug #698929)
-	TODO: check if squeeze is affected
-	NOTE: http://wordpress.org/news/2013/01/wordpress-3-5-1/
-	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/25/7
 CVE-2012-6521 (Cross-site scripting (XSS) vulnerability in ...)
 	NOT-FOR-US: Elefant CMS
 CVE-2012-6520 (Multiple SQL injection vulnerabilities in the advanced search in ...)
@@ -2952,12 +2938,20 @@
 	RESERVED
 CVE-2013-0238
 	RESERVED
-CVE-2013-0237
-	RESERVED
-CVE-2013-0236
-	RESERVED
-CVE-2013-0235
-	RESERVED
+CVE-2013-0237 [wordpress: XSS in external library Plupload fixed in 3.5.1]
+	- wordpress 3.5.1+dfsg-1 (bug #698929)
+	TODO: check if squeeze is affected
+	NOTE: http://wordpress.org/news/2013/01/wordpress-3-5-1/
+	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/25/7
+CVE-2013-0236 [wordpress: XSS fixed in 3.5.1]
+	- wordpress 3.5.1+dfsg-1 (bug #698927)
+	TODO: check if squeeze is affected
+	NOTE: http://wordpress.org/news/2013/01/wordpress-3-5-1/
+	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/25/7
+CVE-2013-0235 [wordpress: server-side request forgery and remote port scanning using pingbacks]
+	- wordpress 3.5.1+dfsg-1 (bug #698916)
+	NOTE: http://wordpress.org/news/2013/01/wordpress-3-5-1/
+	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/25/7
 CVE-2013-0234
 	RESERVED
 	- elgg <itp> (bug #526197)