[Secure-testing-commits] r22923 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2013-07-12 21:14:22 +0000 (Fri, 12 Jul 2013)
New Revision: 22923

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-12 06:50:15 UTC (rev 22922)
+++ data/CVE/list	2013-07-12 21:14:22 UTC (rev 22923)
@@ -1,3 +1,9 @@
+CVE-2013-4792
+	RESERVED
+CVE-2013-4791
+	RESERVED
+CVE-2013-4790
+	RESERVED
 CVE-2013-4789
 	RESERVED
 CVE-2013-4788
@@ -214,20 +220,20 @@
 	RESERVED
 CVE-2013-4691
 	RESERVED
-CVE-2013-4690
-	RESERVED
+CVE-2013-4690 (Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before ...)
+	TODO: check
 CVE-2013-4689
 	RESERVED
-CVE-2013-4688
-	RESERVED
-CVE-2013-4687
-	RESERVED
-CVE-2013-4686
-	RESERVED
-CVE-2013-4685
-	RESERVED
-CVE-2013-4684
-	RESERVED
+CVE-2013-4688 (flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the ...)
+	TODO: check
+CVE-2013-4687 (flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before ...)
+	TODO: check
+CVE-2013-4686 (The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, ...)
+	TODO: check
+CVE-2013-4685 (Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 ...)
+	TODO: check
+CVE-2013-4684 (flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 ...)
+	TODO: check
 CVE-2013-4683 (SQL injection vulnerability in the meta_feedit extension 0.1.10 and ...)
 	NOT-FOR-US: meta_feedit extension for TYPO3
 CVE-2013-4682 (SQL injection vulnerability in the Multishop extension before 2.0.39 ...)
@@ -2953,10 +2959,10 @@
 	RESERVED
 CVE-2013-3420
 	RESERVED
-CVE-2013-3419
-	RESERVED
-CVE-2013-3418
-	RESERVED
+CVE-2013-3419 (Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace ...)
+	TODO: check
+CVE-2013-3418 (Cisco Unified Communications Domain Manager does not properly allocate ...)
+	TODO: check
 CVE-2013-3417
 	RESERVED
 CVE-2013-3416 (Cross-site scripting (XSS) vulnerability in the web framework in the ...)
@@ -7388,8 +7394,8 @@
 	NOT-FOR-US: Drupal addon
 CVE-2013-1778 (Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x ...)
 	NOT-FOR-US: Drupal addon
-CVE-2013-1777
-	RESERVED
+CVE-2013-1777 (The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as ...)
+	TODO: check
 CVE-2013-1776 (sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the ...)
 	{DSA-2642-1}
 	- sudo 1.8.5p2-1+nmu1 (bug #701839)
@@ -7426,8 +7432,8 @@
 	RESERVED
 	- telepathy-gabble 0.16.5-1 (low; bug #702252)
 	[squeeze] - telepathy-gabble <no-dsa> (Minor issue)
-CVE-2013-1768
-	RESERVED
+CVE-2013-1768 (The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and ...)
+	TODO: check
 CVE-2013-1767 (Use-after-free vulnerability in the shmem_remount_fs function in ...)
 	{DSA-2668-1}
 	- linux 3.2.41-1