[Secure-testing-commits] r13125 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2009-10-28 21:22:32 +0000 (Wed, 28 Oct 2009)
New Revision: 13125

Modified:
   data/CVE/list
Log:
update mozilla status


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-10-28 21:14:22 UTC (rev 13124)
+++ data/CVE/list	2009-10-28 21:22:32 UTC (rev 13125)
@@ -1084,62 +1084,56 @@
 	RESERVED
 CVE-2009-3383
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[lenny] - xulrunner <not-affected> (Only affects Firefox 3.5)
 	[etch] - xulrunner <not-affected> (Only affects Firefox 3.5)
 CVE-2009-3382
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3381
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[lenny] - xulrunner <not-affected> (Only affects Firefox 3.5)
 	[etch] - xulrunner <not-affected> (Only affects Firefox 3.5)
 CVE-2009-3380
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3379
 	RESERVED
-	- xulrunner <unfixed>
-	[lenny] - xulrunner <not-affected> (Only affects Firefox 3.5)
-	[etch] - xulrunner <not-affected> (Only affects Firefox 3.5)
+	TODO: check libvorbis
 CVE-2009-3378
 	RESERVED
-	- xulrunner <unfixed>
-	[lenny] - xulrunner <not-affected> (Only affects Firefox 3.5)
-	[etch] - xulrunner <not-affected> (Only affects Firefox 3.5)
+	TODO: check liboggplay
 CVE-2009-3377
 	RESERVED
-	- xulrunner <unfixed>
-	[lenny] - xulrunner <not-affected> (Only affects Firefox 3.5)
-	[etch] - xulrunner <not-affected> (Only affects Firefox 3.5)
+	TODO: check liboggz
 CVE-2009-3376
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3375
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <not-affected> (Only affects Firefox 3.x)
 CVE-2009-3374
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3373
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <not-affected> (Only affects Firefox 3.x)
 CVE-2009-3372
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3371
 	RESERVED
 CVE-2009-3370
 	RESERVED
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3368 (Cross-site scripting (XSS) vulnerability in the Hotel Booking ...)
 	NOT-FOR-US: component for Joomla!
@@ -1346,7 +1340,7 @@
 CVE-2009-3275 (Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs ...)
 	NOT-FOR-US: Microsoft patterns & practices Enterprise Library
 CVE-2009-3274 (Mozilla Firefox 3.6a1, 3.5.2, and earlier 2.x and 3.x versions on ...)
-	- xulrunner <unfixed>
+	- xulrunner 1.9.1.4-1
 	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-3273 (iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not ...)
 	NOT-FOR-US: Apple iPhone
@@ -6743,8 +6737,8 @@
 	RESERVED
 CVE-2009-1563
 	RESERVED
-	- xulrunner <unfixed>
-	[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
+	- nspr <unfixed>
+	[etch] - nspr <no-dsa> (Mozilla packages from oldstable no longer covered by security support)
 CVE-2009-1562
 	RESERVED
 CVE-2009-1561 (Cross-site request forgery (CSRF) vulnerability in administration.cgi ...)