[Secure-testing-commits] r15510 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-10-23 15:36:48 +0000 (Sat, 23 Oct 2010)
New Revision: 15510

Modified:
   data/CVE/list
Log:
dimp NMUd
new chrome/webkit issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-10-23 15:24:33 UTC (rev 15509)
+++ data/CVE/list	2010-10-23 15:36:48 UTC (rev 15510)
@@ -23,25 +23,35 @@
 CVE-2010-4043 (Opera before 10.63 does not prevent interpretation of a cross-origin ...)
 	TODO: check
 CVE-2010-4042 (Google Chrome before 7.0.517.41 does not properly handle element maps, ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4041 (The sandbox implementation in Google Chrome before 7.0.517.41 on Linux ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4040 (Google Chrome before 7.0.517.41 does not properly handle animated GIF ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4039 (Google Chrome before 7.0.517.41 on Linux does not properly set the ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4038 (The Web Sockets implementation in Google Chrome before 7.0.517.41 does ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4037 (Unspecified vulnerability in Google Chrome before 7.0.517.41 allows ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4036 (Google Chrome before 7.0.517.41 does not properly handle the unloading ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4035 (Google Chrome before 7.0.517.41 does not properly perform autofill ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4034 (Google Chrome before 7.0.517.41 does not properly handle forms, which ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4033 (Google Chrome before 7.0.517.41 does not properly implement the ...)
-	TODO: check
+	- webkit <undetermined>
+	- chromium-browser <undetermined>
 CVE-2010-4032
 	RESERVED
 CVE-2010-4031
@@ -335,7 +345,8 @@
 CVE-2010-3901 (OpenConnect before 2.25 does not properly validate X.509 certificates, ...)
 	- openconnect 2.25-0.1 (bug #590873)
 CVE-2010-3900 (Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before ...)
-	- midori 0.2.7-1.1
+	- midori 0.2.7-1.1 (unimportant)
+	NOTE: Current Midori SSL support is very limited
 CVE-2010-3899
 	RESERVED
 CVE-2010-3898
@@ -835,7 +846,7 @@
 	NOTE: http://lists.horde.org/archives/announce/2010/000568.html
 CVE-2010-3693 [XSS vulnerability when showing mailbox names]
 	RESERVED
-	- dimp1 <unfixed> (bug #598583)
+	- dimp1 1.1.4+debian2-1.1 (bug #598583)
 	NOTE: http://lists.horde.org/archives/announce/2010/000561.html
 CVE-2010-3692 (Directory traversal vulnerability in the callback function in ...)
 	- libphp-cas <itp> (bug #495542)