[Secure-testing-commits] r19854 - data/CVE

Joey Hess
Wed, 01 Aug 2012 21:14:23 -0000

Author: joeyh
Date: 2012-08-01 21:14:23 +0000 (Wed, 01 Aug 2012)
New Revision: 19854

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2012-08-01 20:26:40 UTC (rev 19853)
+++ data/CVE/list	2012-08-01 21:14:23 UTC (rev 19854)
@@ -1,3 +1,145 @@
+CVE-2012-4141
+	RESERVED
+CVE-2012-4140
+	RESERVED
+CVE-2012-4139
+	RESERVED
+CVE-2012-4138
+	RESERVED
+CVE-2012-4137
+	RESERVED
+CVE-2012-4136
+	RESERVED
+CVE-2012-4135
+	RESERVED
+CVE-2012-4134
+	RESERVED
+CVE-2012-4133
+	RESERVED
+CVE-2012-4132
+	RESERVED
+CVE-2012-4131
+	RESERVED
+CVE-2012-4130
+	RESERVED
+CVE-2012-4129
+	RESERVED
+CVE-2012-4128
+	RESERVED
+CVE-2012-4127
+	RESERVED
+CVE-2012-4126
+	RESERVED
+CVE-2012-4125
+	RESERVED
+CVE-2012-4124
+	RESERVED
+CVE-2012-4123
+	RESERVED
+CVE-2012-4122
+	RESERVED
+CVE-2012-4121
+	RESERVED
+CVE-2012-4120
+	RESERVED
+CVE-2012-4119
+	RESERVED
+CVE-2012-4118
+	RESERVED
+CVE-2012-4117
+	RESERVED
+CVE-2012-4116
+	RESERVED
+CVE-2012-4115
+	RESERVED
+CVE-2012-4114
+	RESERVED
+CVE-2012-4113
+	RESERVED
+CVE-2012-4112
+	RESERVED
+CVE-2012-4111
+	RESERVED
+CVE-2012-4110
+	RESERVED
+CVE-2012-4109
+	RESERVED
+CVE-2012-4108
+	RESERVED
+CVE-2012-4107
+	RESERVED
+CVE-2012-4106
+	RESERVED
+CVE-2012-4105
+	RESERVED
+CVE-2012-4104
+	RESERVED
+CVE-2012-4103
+	RESERVED
+CVE-2012-4102
+	RESERVED
+CVE-2012-4101
+	RESERVED
+CVE-2012-4100
+	RESERVED
+CVE-2012-4099
+	RESERVED
+CVE-2012-4098
+	RESERVED
+CVE-2012-4097
+	RESERVED
+CVE-2012-4096
+	RESERVED
+CVE-2012-4095
+	RESERVED
+CVE-2012-4094
+	RESERVED
+CVE-2012-4093
+	RESERVED
+CVE-2012-4092
+	RESERVED
+CVE-2012-4091
+	RESERVED
+CVE-2012-4090
+	RESERVED
+CVE-2012-4089
+	RESERVED
+CVE-2012-4088
+	RESERVED
+CVE-2012-4087
+	RESERVED
+CVE-2012-4086
+	RESERVED
+CVE-2012-4085
+	RESERVED
+CVE-2012-4084
+	RESERVED
+CVE-2012-4083
+	RESERVED
+CVE-2012-4082
+	RESERVED
+CVE-2012-4081
+	RESERVED
+CVE-2012-4080
+	RESERVED
+CVE-2012-4079
+	RESERVED
+CVE-2012-4078
+	RESERVED
+CVE-2012-4077
+	RESERVED
+CVE-2012-4076
+	RESERVED
+CVE-2012-4075
+	RESERVED
+CVE-2012-4074
+	RESERVED
+CVE-2012-4073
+	RESERVED
+CVE-2012-4072
+	RESERVED
+CVE-2012-4071
+	RESERVED
 CVE-2012-4070
 	RESERVED
 CVE-2012-4069
@@ -256,7 +398,7 @@
 CVE-2012-3955
 	RESERVED
 CVE-2012-3954 (Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before
4.2.4-P1 and ...)
-	{DSA-2516-1}
+	{DSA-2519-1 DSA-2516-1}
 	- isc-dhcp <unfixed>
 	NOTE: https://kb.isc.org/article/AA-00737
 CVE-2012-3953
@@ -1056,7 +1198,7 @@
 CVE-2011-5094 (** DISPUTED ** Mozilla Network Security Services (NSS) 3.x, with
...)
 	NOTE: Disputed NSS issue
 CVE-2012-3571 (ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6
allows ...)
-	{DSA-2516-1}
+	{DSA-2519-1 DSA-2516-1}
 	- isc-dhcp <unfixed>
 	NOTE: https://kb.isc.org/article/AA-00712
 CVE-2012-3570 (Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6
mode is ...)
@@ -1315,20 +1457,17 @@
 	[squeeze] - libvirt <not-affected> (Vulnerable code not present)
 	NOTE: https://www.redhat.com/archives/libvir-list/2012-July/msg01650.html
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=844734
-CVE-2012-3444 [Denial-of-service via get_image_dimensions]
-	RESERVED
+CVE-2012-3444 (The get_image_dimensions function in the image-handling
functionality ...)
 	- python-django <unfixed> (bug #683364)
 	NOTE:
https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/31/1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/31/2
-CVE-2012-3443 [Denial-of-service in image validation]
-	RESERVED
+CVE-2012-3443 (The django.forms.ImageField class in the form system in Django
before ...)
 	- python-django <unfixed> (bug #683364)
 	NOTE:
https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/31/1
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/31/2
-CVE-2012-3442 [Cross-site scripting in authentication views]
-	RESERVED
+CVE-2012-3442 (The (1) django.http.HttpResponseRedirect and (2) ...)
 	- python-django <unfixed> (bug #683364)
 	NOTE:
https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
 	NOTE: http://www.openwall.com/lists/oss-security/2012/07/31/1
@@ -3167,6 +3306,7 @@
 	RESERVED
 CVE-2012-2665 [Multiple heap-based buffer overflows in the XML manifest
encryption handling code]
 	RESERVED
+	{DSA-2520-1}
 	- libreoffice 1:3.5.4-7
 	[squeeze] - openoffice.org <unfixed>
 CVE-2012-2664 (The sosreport utility in the Red Hat sos package before 2.2-29
does ...)
@@ -11315,6 +11455,7 @@
 CVE-2011-4540 (Multiple cross-site scripting (XSS) vulnerabilities in AtMail
Open ...)
 	NOT-FOR-US: AtMail
 CVE-2011-4539 (dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before
4.1-ESV-R4 ...)
+	{DSA-2519-1}
 	- dhcp3 <not-affected> (Only affects DHCP 4.x)
 	- isc-dhcp 4.2.2.dfsg.1-5 (bug #652259; low)