Author: joeyh Date: 2012-05-10 21:14:38 +0000 (Thu, 10 May 2012) New Revision: 19198 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-05-10 21:13:53 UTC (rev 19197) +++ data/CVE/list 2012-05-10 21:14:38 UTC (rev 19198) @@ -979,6 +979,7 @@ NOT-FOR-US: Dynamic LDAP backend plugin for BIND CVE-2012-2133 RESERVED + {DSA-2469-1} - linux-2.6 <unfixed> CVE-2012-2132 [libsoup 2.32.2 sets ssl trusted flag despite no verification] RESERVED @@ -1013,6 +1014,7 @@ - squirrelmail <not-affected> (Incorrect RedHat security update) CVE-2012-2123 RESERVED + {DSA-2469-1} - linux-2.6 3.2.16-1 CVE-2012-2122 RESERVED @@ -2251,6 +2253,7 @@ RESERVED CVE-2012-1601 RESERVED + {DSA-2469-1} - linux-2.6 <unfixed> (low) CVE-2012-1600 [XSS from 5.0.4 release] RESERVED @@ -3989,6 +3992,7 @@ RESERVED CVE-2012-0879 RESERVED + {DSA-2469-1} - linux-2.6 2.6.33-1 CVE-2012-0878 (Paste Script 1.7.5 and earlier does not properly set group memberships ...) - pastescript <unfixed> (low; bug #661061) @@ -9074,6 +9078,7 @@ [lenny] - linux-2.6 <not-affected> (Introduced in 2.6.37) CVE-2011-4086 RESERVED + {DSA-2469-1} - linux-2.6 <unfixed> (low) CVE-2011-4085 RESERVED @@ -9388,7 +9393,7 @@ CVE-2011-XXXX [0.1.1+dfsg-1 multiple issues] - ibid 0.1.1+dfsg-1 [squeeze] - ibid 0.1.0+dfsg-2+squeeze1 -CVE-2011-2687 [SA-CORE-2011-001] +CVE-2011-2687 (Drupal 7.x before 7.3 allows remote attackers to bypass intended ...) NOTE: http://drupal.org/node/1168756 - drupal7 7.2-1 (bug #633385) - drupal6 6.22-1