Author: jmm
Date: 2013-01-10 16:03:51 +0000 (Thu, 10 Jan 2013)
New Revision: 20880
Modified:
data/CVE/list
Log:
new xen issue
jenkins-winstone fixed
add tracking items for chromium ffmpeg-mt issue
NFU
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-01-10 10:03:43 UTC (rev 20879)
+++ data/CVE/list 2013-01-10 16:03:51 UTC (rev 20880)
@@ -2528,7 +2528,7 @@
CVE-2012-6072 [HTTP response splitting]
RESERVED
- jenkins <unfixed> (bug #696816)
- - jenkins-winstone <unfixed> (bug #696974)
+ - jenkins-winstone 0.9.10-jenkins-37+dfsg-2 (bug #696974)
NOTE:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20
NOTE: http://www.openwall.com/lists/oss-security/2012/12/28/1
CVE-2012-6071 [libnusoap-php: Curl insecure usage]
@@ -3821,6 +3821,7 @@
RESERVED
CVE-2012-5647
RESERVED
+ NOT-FOR-US: OpenShift
CVE-2012-5646
RESERVED
NOT-FOR-US: OpenShift
@@ -3862,6 +3863,7 @@
RESERVED
CVE-2012-5634
RESERVED
+ - xen <unfixed> (low)
CVE-2012-5633
RESERVED
CVE-2012-5632
@@ -5072,7 +5074,8 @@
RESERVED
CVE-2012-5144 (Google Chrome before 23.0.1271.97 does not properly perform AAC
...)
- chromium-browser <unfixed>
- TODO: That might affect the internal ffmpeg copy
+ - ffmpeg <removed>
+ - libav <unfixed> (bug #694483)
CVE-2012-5143 (Integer overflow in Google Chrome before 23.0.1271.97 allows
remote ...)
- chromium-browser <unfixed>
CVE-2012-5142 (Google Chrome before 23.0.1271.97 does not properly handle
history ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
