Author: joeyh Date: 2012-04-12 21:14:42 +0000 (Thu, 12 Apr 2012) New Revision: 18931 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-04-12 20:05:43 UTC (rev 18930) +++ data/CVE/list 2012-04-12 21:14:42 UTC (rev 18931) @@ -1,3 +1,13 @@ +CVE-2012-2230 (Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration ...) + TODO: check +CVE-2012-2229 + RESERVED +CVE-2012-2228 + RESERVED +CVE-2012-2227 + RESERVED +CVE-2012-2226 + RESERVED CVE-2012-2225 (360zip 1.93beta allows remote attackers to execute arbitrary code via ...) NOT-FOR-US: 360zip CVE-2012-2224 (Xunlei Thunder before 7.2.6 allows remote attackers to execute ...) @@ -1456,8 +1466,8 @@ RESERVED CVE-2012-1575 RESERVED -CVE-2012-1574 - RESERVED +CVE-2012-1574 (The Kerberos/MapReduce security functionality in Apache Hadoop ...) + TODO: check CVE-2012-1573 (gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before ...) {DSA-2441-1} - gnutls26 2.12.18-1 (high) @@ -2298,6 +2308,7 @@ - asterisk 1:1.8.10.0~dfsg-1 (bug #664411) NOTE: http://www.openwall.com/lists/oss-security/2012/03/16/10 CVE-2012-1182 (The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before ...) + {DSA-2450-1} - samba 2:3.6.4-1 (bug #668309) - samba4 4.0.0~alpha19+dfsg1-1 (bug #668309) CVE-2012-1181 (fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP ...) @@ -5653,8 +5664,8 @@ RESERVED CVE-2012-0134 RESERVED -CVE-2012-0133 - RESERVED +CVE-2012-0133 (HP ProCurve 5400 zl switches with certain serial numbers include a ...) + TODO: check CVE-2012-0132 (Cross-site scripting (XSS) vulnerability in HP Business Availability ...) TODO: check CVE-2012-0131 (Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX ...) @@ -8988,8 +8999,8 @@ - puppet 2.7.3-2 CVE-2011-3847 RESERVED -CVE-2011-3846 - RESERVED +CVE-2011-3846 (Cross-site request forgery (CSRF) vulnerability in HP System ...) + TODO: check CVE-2011-3845 (Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in ...) NOT-FOR-US: Apple Safari CVE-2011-3844 (Apple Safari 5.0.5 does not properly implement the setInterval ...)