[Secure-testing-commits] r3428 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-02-05 13:29:08 +0000 (Sun, 05 Feb 2006)
New Revision: 3428

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
doh, the firefox src pkg has been renamed for 1.5
some bugnums


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-02-05 11:58:41 UTC (rev 3427)
+++ data/CVE/list	2006-02-05 13:29:08 UTC (rev 3428)
@@ -591,38 +591,40 @@
 CVE-2006-0300
 	RESERVED
 CVE-2006-0299 (The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird ...)
-	[sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
+	- mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
 	- mozilla <not-affected> (E4X not implemented in Mozilla 1.7)
-	- mozilla-firefox <unfixed> (bug #351442)
+	- firefox <unfixed> (bug #351442)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0298 (The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before ...)
-	[sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
+	- mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
 	- mozilla <not-affected> (Mozilla 1.7 is not affected)
-	- mozilla-firefox <unfixed> (bug #351442)
+	- firefox <unfixed> (bug #351442)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0297 (Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if ...)
-	[sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
+	- mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
 	- mozilla <not-affected> (Mozilla 1.7 is not affected)
-	- mozilla-firefox <unfixed> (bug #351442)
+	- firefox <unfixed> (bug #351442)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0296 (The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, ...)
-	[sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
-	- mozilla-firefox <unfixed> (bug #351442)
+	- mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
+	- firefox <unfixed> (bug #351442)
 	- mozilla-thunderbird <unfixed>
 	- mozilla <not-affected> (Mozilla 1.7 is not affected)
 CVE-2006-0295 (Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, ...)
+	- firefox <unfixed> (bug #351442)
 	- mozilla-firefox <unfixed> (bug #351442)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0294 (Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript ...)
-	- mozilla-firefox <unfixed> (bug #351442)
-	[sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
+	- firefox <unfixed> (bug #351442)
+	- mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
 	- mozilla <not-affected> (Mozilla 1.7 is not affected)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0293 (The function allocation code (js_NewFunction in jsfun.c) in Firefox ...)
-	- mozilla-firefox <unfixed> (bug #351442)
-	[sarge] - mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
+	- firefox <unfixed> (bug #351442)
+	- mozilla-firefox <not-affected> (Only Firefox 1.5 is affected)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0292 (The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before ...)
+	- firefox <unfixed> (bug #351442)
 	- mozilla-firefox <unfixed> (bug #351442)
 	- mozilla-thunderbird <unfixed>
 CVE-2006-0291 (Multiple unspecified vulnerabilities in Oracle Database Server ...)
@@ -9241,6 +9243,7 @@
 	- pvpgn 1.7.8-2 (bug #332236; unknown)
 	- mysql-dfsg-4.1 (bug #319858; unimportant)
 	NOTE: fixed in experimental in 1:1.0.5.6-1, not yet in sid
+	- mrtg <not-affected> (Only used for internal compression, current versions link dynamically)
 CVE-2005-2095 (options_identities.php in SquirrelMail 1.4.4 and earlier uses the ...)
 	{DSA-756-1}
 	- squirrelmail 2:1.4.4-6sarge1 (bug #317094)
@@ -18143,7 +18146,7 @@
 	- cabextract 1.1-1
 CVE-2004-0915 (Multiple unknown vulnerabilities in viewcvs before 0.9.2, when ...)
 	{DSA-605-1}
-	- viewcvs 0.9.2+cvs.1.0.dev.2004.07.28-1.2
+	- viewcvs 0.9.2+cvs.1.0.dev.2004.07.28-1.2 (bug #284237)
 CVE-2004-0914 (Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in ...)
 	{DSA-607-1}
 	NOTE: Previous -9 fix had some issues of its own

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies	2006-02-05 11:58:41 UTC (rev 3427)
+++ data/embedded-code-copies	2006-02-05 13:29:08 UTC (rev 3428)
@@ -19,6 +19,7 @@
 mozilla(?)
 Linux kernels
 pvpgn (links dynamically since 1.7.8-2)
+mrtg (links dynamically since 2.12.2-1)
 
 
 libgadu/ekg: