[Secure-testing-commits] r13198 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2009-11-04 22:35:34 +0000 (Wed, 04 Nov 2009)
New Revision: 13198

Modified:
   data/CVE/list
Log:
wireshark and xulrunner updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-11-04 22:29:49 UTC (rev 13197)
+++ data/CVE/list	2009-11-04 22:35:34 UTC (rev 13198)
@@ -777,13 +777,14 @@
 	RESERVED
 CVE-2009-3551 (Off-by-one error in the dissect_negprot_response function in ...)
 	- wireshark 1.2.3-1 (low; bug #553583)
-	NOTE: http://www.wireshark.org/security/wnpa-sec-2009-07.html
+	[lenny] - wireshark <not-affected> (Only affects Wireshark 1.2.x)
+	[etch] - wireshark <not-affected> (Only affects Wireshark 1.2.x)
 CVE-2009-3550 (The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 ...)
 	- wireshark 1.2.3-1 (low; bug #553583)
-	NOTE: http://www.wireshark.org/security/wnpa-sec-2009-07.html
 CVE-2009-3549 (packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through ...)
 	- wireshark 1.2.3-1 (low; bug #553583)
-	NOTE: http://www.wireshark.org/security/wnpa-sec-2009-07.html
+	[lenny] - wireshark <not-affected> (Only affects Wireshark 1.2.x)
+	[etch] - wireshark <not-affected> (Only affects Wireshark 1.2.x)
 CVE-2009-3548
 	RESERVED
 CVE-2009-3547 [linux-2.6: null ptr dereferences]
@@ -4124,8 +4125,6 @@
 	[lenny] - wireshark <not-affected> (Only affects 1.2.0)
 CVE-2009-2560 (Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote ...)
 	- wireshark 1.2.1-1 (bug #538237)
-	[etch] - wireshark <not-affected> (Only affects 1.2.0)
-	[lenny] - wireshark <not-affected> (Only affects 1.2.0)
 CVE-2009-2559 (Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote ...)
 	- wireshark 1.2.1-1 (bug #538237)
 	[etch] - wireshark <not-affected> (Only affects 1.2.0)
@@ -4324,22 +4323,18 @@
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-40.html
 CVE-2009-2471 (The setTimeout function in Mozilla Firefox before 3.0.12 does not ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-39.html
 CVE-2009-2470 (Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-38.html
 CVE-2009-2469 (Mozilla Firefox before 3.0.12 does not properly handle an SVG element ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-37.html
 CVE-2009-2468 (Integer overflow in Apple CoreGraphics, as used in Safari before ...)
 	NOT-FOR-US: CoreGraphics in Apple Mac OS X
 	NOTE: related issue to CVE-2009-1194
@@ -4347,27 +4342,22 @@
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-35.html
 CVE-2009-2466 (The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
 CVE-2009-2465 (Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
 CVE-2009-2464 (The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
 CVE-2009-2463 (Integer overflow in a base64 decoding function in Mozilla Firefox ...)
 	{DSA-1840-1}
-	- xulrunner 1.9.0.12-1
-	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
-	NOTE: http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
+	- nspr 4.8.2-1
+	[etch] - nspr <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-2462 (The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird ...)
 	{DSA-1840-1}
 	- xulrunner 1.9.0.12-1