[Secure-testing-commits] r7186 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-11-01 21:25:04 +0000 (Thu, 01 Nov 2007)
New Revision: 7186

Modified:
   data/CVE/list
Log:
xulrunner fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-01 21:24:07 UTC (rev 7185)
+++ data/CVE/list	2007-11-01 21:25:04 UTC (rev 7186)
@@ -1733,7 +1733,7 @@
 CVE-2007-5340 (Multiple vulnerabilities in the Javascript engine in Mozilla Firefox ...)
 	{DSA-1396-1 DSA-1392-1 DSA-1391-1 DTSA-69-1 DTSA-71-1}
 	- iceweasel 2.0.0.8-1 (high)
-	- xulrunner <unfixed> (high)
+	- xulrunner 1.8.1.9-1 (high)
 	- icedove <unfixed> (low)
 	- iceape <unfixed> (high)
 	- mozilla <removed>
@@ -1743,18 +1743,17 @@
 CVE-2007-5339 (Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, ...)
 	{DSA-1396-1 DSA-1392-1 DSA-1391-1 DTSA-69-1 DTSA-71-1}
 	- iceweasel 2.0.0.8-1 (high)
-	- xulrunner <unfixed> (bug #447734; high)
+	- xulrunner 1.8.1.9-1 (bug #447734; high)
 	- icedove <unfixed> (low)
 	- iceape <unfixed> (high)
 	- mozilla <removed>
 	- mozilla-firefox <removed>
 	- mozilla-thunderbird <removed>
-	NOTE: xulrunner 1.8.1.6-1 still vulnerable
 	NOTE: MFSA2007-29
 CVE-2007-5338 (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote ...)
 	{DSA-1396-1 DSA-1392-1 DTSA-69-1}
 	- iceweasel 2.0.0.8-1
-	- xulrunner <unfixed>
+	- xulrunner 1.8.1.9-1
 	- iceape <unfixed>
 	- mozilla <removed>
 	- mozilla-firefox <removed>
@@ -1762,7 +1761,7 @@
 CVE-2007-5337 (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when ...)
 	{DSA-1396-1 DSA-1392-1 DTSA-69-1}
 	- iceweasel 2.0.0.8-1
-	- xulrunner <unfixed>
+	- xulrunner 1.8.1.9-1
 	- iceape <unfixed>
 	- mozilla <removed>
 	- mozilla-firefox <removed>
@@ -1775,7 +1774,7 @@
 CVE-2007-5334 (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the ...)
 	{DSA-1396-1 DSA-1392-1 DTSA-69-1}
 	- iceweasel 2.0.0.8-1
-	- xulrunner <unfixed>
+	- xulrunner 1.8.1.9-1
 	- iceape <unfixed>
 	- mozilla <removed>
 	- mozilla-firefox <removed>
@@ -6122,7 +6121,7 @@
 CVE-2007-3511 (The focus handling for the onkeydown event in Mozilla Firefox ...)
 	{DSA-1396-1 DSA-1392-1 DTSA-69-1}
 	- iceweasel 2.0.0.8-1 (bug #438873; low)
-	- xulrunner <unfixed>
+	- xulrunner 1.8.1.9-1
 	- iceape <unfixed>
 	- mozilla <removed>
 	- mozilla-firefox <removed>
@@ -9054,7 +9053,7 @@
 CVE-2007-2292 (CRLF injection vulnerability in the Digest Authentication support for ...)
 	{DSA-1396-1 DSA-1392-1 DTSA-69-1}
 	- iceweasel 2.0.0.8-1 (low)
-	- xulrunner <unfixed>
+	- xulrunner 1.8.1.9-1
 	- iceape <unfixed>
 	- mozilla <removed>
 	- mozilla-firefox <removed>
@@ -12037,7 +12036,7 @@
 CVE-2007-1095 (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not ...)
 	{DSA-1396-1 DSA-1392-1 DTSA-69-1}
 	- iceweasel 2.0.0.8-1 (low; bug #445514)
-	- xulrunner <unfixed>
+	- xulrunner 1.8.1.9-1
 	- iceape <unfixed>
 	- mozilla <removed>
 	- mozilla-firefox <removed>