[Secure-testing-commits] r21788 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-03-31 20:02:33 +0000 (Sun, 31 Mar 2013)
New Revision: 21788

Modified:
   data/CVE/list
Log:
add references for two mysql issues; looks only vague information given

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-30 21:24:38 UTC (rev 21787)
+++ data/CVE/list	2013-03-31 20:02:33 UTC (rev 21788)
@@ -2874,7 +2874,9 @@
 	- openjdk-6 6b27-1.12.4-1
 	- openjdk-7 7u3-2.1.7-1
 CVE-2013-1492 (Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and ...)
-	TODO: check
+	- mysql-5.1 <removed>
+	- mysql-5.5 5.5.30+dfsg-1
+	NOTE: https://blogs.oracle.com/sunsecurity/entry/cve_2013_1492_buffer_overflow
 CVE-2013-1491 (Oracle Java 7 Update 17, and possibly other versions, allows remote ...)
 	- openjdk-7 <undetermined>
 CVE-2013-1490 (Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE ...)
@@ -21654,7 +21656,9 @@
 CVE-2012-0554 (Unspecified vulnerability in the Oracle Outside In Technology ...)
 	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2012-0553 (Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and ...)
-	TODO: check
+	- mysql-5.1 <removed>
+	- mysql-5.5 5.5.28+dfsg-1
+	NOTE: https://blogs.oracle.com/sunsecurity/entry/cve_2012_0553_buffer_overflow
 CVE-2012-0552 (Unspecified vulnerability in the Oracle Spatial component in Oracle ...)
 	NOT-FOR-US: Oracle Database Server
 CVE-2012-0551 (Unspecified vulnerability in the Java Runtime Environment (JRE) in ...)