[Secure-testing-commits] r23062 - in data: CVE DSA

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-07-24 18:18:35 +0000 (Wed, 24 Jul 2013)
New Revision: 23062

Modified:
   data/CVE/list
   data/DSA/list
Log:
CVE-2012-4735 was rejected in favour of CVE-2012-6578 CVE-2012-6579 CVE-2012-6580 CVE-2012-6581

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-24 17:35:31 UTC (rev 23061)
+++ data/CVE/list	2013-07-24 18:18:35 UTC (rev 23062)
@@ -370,17 +370,25 @@
 	- otrs2 3.2.9-1
 	NOTE: http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2013-05/
 CVE-2012-6581
-	- request-tracker3.8 <unfixed>
-	- request-tracker4 <unfixed>
+	{DSA-2671-1}
+	- request-tracker3.8 <removed>
+	- request-tracker4 4.0.7-2
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=870406#c3
 CVE-2012-6580
-	- request-tracker3.8 <unfixed>
-	- request-tracker4 <unfixed>
+	{DSA-2671-1}
+	- request-tracker3.8 <removed>
+	- request-tracker4 4.0.7-2
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=870406#c3
 CVE-2012-6579
-	- request-tracker3.8 <unfixed>
-	- request-tracker4 <unfixed>
+	{DSA-2671-1}
+	- request-tracker3.8 <removed>
+	- request-tracker4 4.0.7-2
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=870406#c3
 CVE-2012-6578
-	- request-tracker3.8 <unfixed>
-	- request-tracker4 <unfixed>
+	{DSA-2671-1}
+	- request-tracker3.8 <removed>
+	- request-tracker4 4.0.7-2
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=870406#c3
 CVE-2012-6577 (SQL injection vulnerability in the Formhandler extension before 1.4.1 ...)
 	NOT-FOR-US: Formhandler TYPO3 extension
 CVE-2012-6576 (Cross-site scripting (XSS) vulnerability in the PRH Search module ...)
@@ -17147,10 +17155,7 @@
 CVE-2012-4736 (The Device Encryption Client component in Sophos SafeGuard Enterprise ...)
 	NOT-FOR-US: Sophos SafeGuard Enterprise
 CVE-2012-4735
-	RESERVED
-	{DSA-2567-1}
-	- request-tracker3.8 <removed>
-	- request-tracker4 4.0.7-2
+	REJECTED
 CVE-2012-4734 (Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows ...)
 	{DSA-2567-1}
 	- request-tracker3.8 <removed>

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2013-07-24 17:35:31 UTC (rev 23061)
+++ data/DSA/list	2013-07-24 18:18:35 UTC (rev 23062)
@@ -510,7 +510,7 @@
 	{CVE-2012-4731}
 	[squeeze] - rtfm 2.4.2-4+squeeze2
 [26 Oct 2012] DSA-2567-1 request-tracker3.8 - several
-	{CVE-2012-4730 CVE-2012-4732 CVE-2012-4734 CVE-2012-4735 CVE-2012-4884}
+	{CVE-2012-4730 CVE-2012-4732 CVE-2012-4734 CVE-2012-4884 CVE-2012-6578 CVE-2012-6579 CVE-2012-6580 CVE-2012-6581}
 	[squeeze] - request-tracker3.8 3.8.8-7+squeeze6
 [26 Oct 2012] DSA-2566-1 exim4 - heap overflow
 	{CVE-2012-5671}