[Secure-testing-commits] r19102 - data/CVE

Moritz Muehlenhoff
Mon, 30 Apr 2012 07:57:53 -0000

Author: jmm
Date: 2012-04-30 07:57:53 +0000 (Mon, 30 Apr 2012)
New Revision: 19102

Modified:
   data/CVE/list
Log:
checked spring issues and fixed src pkg names
one kernel issue fixed


Modified: data/CVE/list
==================================================================---
data/CVE/list	2012-04-29 12:00:05 UTC (rev 19101)
+++ data/CVE/list	2012-04-30 07:57:53 UTC (rev 19102)
@@ -590,7 +590,7 @@
 	- squirrelmail <not-affected> (Incorrect RedHat security update)
 CVE-2012-2123
 	RESERVED
-	- linux-2.6 <unfixed>
+	- linux-2.6 3.2.16-1
 CVE-2012-2122
 	RESERVED
 CVE-2012-2121
@@ -12386,8 +12386,8 @@
 	{DSA-2293-1}
 	- libxfont 1:1.4.4-1
 CVE-2011-2894 (Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0
through ...)
-	- libspring-2.5-java <unfixed>
-	TODO: check
+	- libspring-security-2.0-java <unfixed>
+	- libspring-java <unfixed>
 CVE-2011-2893 (The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows
...)
 	NOT-FOR-US: IBM Lotus Symphony
 CVE-2011-2892 (Joomla! 1.6.x before 1.6.2 does not prevent page rendering
inside a ...)
@@ -12942,16 +12942,13 @@
 	NOT-FOR-US: EMC RSA Adaptive Authentication On-Premise
 CVE-2011-2732
 	RESERVED
-	- libspring-2.5-java <unfixed>
-	TODO: check
+	- libspring-security-2.0-java <unfixed>
 CVE-2011-2731
 	RESERVED
-	- libspring-2.5-java <unfixed>
-	TODO: check
+	- libspring-security-2.0-java <unfixed>
 CVE-2011-2730
 	RESERVED
 	- libspring-2.5-java <unfixed>
-	TODO: check
 CVE-2011-2729 (native/unix/native/jsvc-unix.c in jsvc in the Daemon component
1.0.3 ...)
 	- commons-daemon 1.0.7-1
 	[squeeze] - commons-daemon <not-affected> (Support for libcap was only
added in 1.0.6)