[Secure-testing-commits] r19608 - data/CVE

Moritz Muehlenhoff
Tue, 26 Jun 2012 17:39:14 -0000

Author: jmm
Date: 2012-06-26 17:39:14 +0000 (Tue, 26 Jun 2012)
New Revision: 19608

Modified:
   data/CVE/list
Log:
new openssl issue
new globus-ftpd issue (fixed in sid)


Modified: data/CVE/list
==================================================================---
data/CVE/list	2012-06-26 15:17:10 UTC (rev 19607)
+++ data/CVE/list	2012-06-26 17:39:14 UTC (rev 19608)
@@ -17,7 +17,7 @@
 CVE-2012-3790 (Cross-site scripting (XSS) vulnerability in index.php in Adiscon
...)
 	NOT-FOR-US: Adiscon LogAnalyzer
 CVE-2011-5095 (The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8,
when ...)
-	TODO: check
+	- openssl <unfixed>
 CVE-2012-3789
 	RESERVED
 CVE-2012-3788
@@ -1036,7 +1036,7 @@
 CVE-2012-3293
 	RESERVED
 CVE-2012-3292 (The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain
autoconf ...)
-	TODO: check
+	- globus-gridftp-server 6.5-1
 CVE-2012-3291 (Heap-based buffer overflow in OpenConnect 3.18 allows remote
servers ...)
 	{DSA-2495-1}
 	- openconnect 3.18-1 (bug #677594)