Author: jmm
Date: 2012-01-02 10:45:22 +0000 (Mon, 02 Jan 2012)
New Revision: 17991
Modified:
data/CVE/list
Log:
new vlc issue
one older php issue unimportant
plone removed
mark ruby hash collision issue as not affecting ruby1.9
Modified: data/CVE/list
==================================================================---
data/CVE/list 2012-01-02 09:14:16 UTC (rev 17990)
+++ data/CVE/list 2012-01-02 10:45:22 UTC (rev 17991)
@@ -1,3 +1,5 @@
+CVE-2011-XXXX [http://www.videolan.org/security/sa1108.html]
+ - vlc 1.1.13-1
CVE-2011-XXXX [maradns dos]
- maradns 1.4.09-1
[squeeze] - maradns <no-dsa> (Minor issue)
@@ -700,6 +702,8 @@
RESERVED
CVE-2011-4815 (Ruby (aka CRuby) before 1.8.7-p357 computes hash values without
...)
- ruby1.8 <unfixed>
+ - ruby1.9 <not-affected> (Includes randomisation of the hash function)
+ - ruby1.9.1 <not-affected> (Includes randomisation of the hash function)
CVE-2012-0185
RESERVED
CVE-2012-0184
@@ -1892,7 +1896,7 @@
CVE-2011-4463
RESERVED
CVE-2011-4462 (Plone 4.1.3 and earlier computes hash values for form parameters
...)
- - plone3 <unfixed>
+ - plone3 <removed>
CVE-2011-4461 (Jetty 8.1.0.RC2 and earlier computes hash values for form
parameters ...)
- jetty <unfixed>
CVE-2011-4460
@@ -10639,8 +10643,9 @@
- php5 5.3.6-1 (unimportant)
NOTE: under normal conditions the amount of memory leaked is insignificant
CVE-2011-1467 (Unspecified vulnerability in the NumberFormatter::setSymbol (aka
...)
- - php5 5.3.6-1
+ - php5 5.3.6-1 (unimportant)
[lenny] - php5 <not-affected> (intl extension included since 5.3)
+ NOTE: Only triggerable with malicious script
CVE-2011-1466 (Integer overflow in the SdnToJulian function in the Calendar
extension ...)
{DSA-2266-1}
- php5 5.3.6-1