[Secure-testing-commits] r17318 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-09-28 12:41:42 +0000 (Wed, 28 Sep 2011)
New Revision: 17318

Modified:
   data/CVE/list
Log:
more mozilla issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-09-28 12:21:47 UTC (rev 17317)
+++ data/CVE/list	2011-09-28 12:41:42 UTC (rev 17318)
@@ -1,3 +1,12 @@
+CVE-2011-XXXX [http://www.mozilla.org/security/announce/2011/mfsa2011-37.html]
+	- icedove <unfixed>
+	- xulrunner <removed>
+	- iceweasel 4.0-1
+	[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
+	- iceape <unfixed>
+	[lenny] - iceape <not-affected> (Only a stub package)
+	NOTE: Only affects firefox 3.6 code base, not 4.0 oder later
+	NOTE: This is very likely CVE-2011-2998, pinged Mozilla Sec Team
 CVE-2011-XXXX [http://www.mozilla.org/security/announce/2011/mfsa2011-45.html]
 	- xulrunner <not-affected> (Only affects Firefox >= 4)
 	- iceweasel <unfixed>
@@ -1937,18 +1946,53 @@
 	- iceape <not-affected> (Only affects Firefox >= 4)
 CVE-2011-3001
 	RESERVED
+	- xulrunner <not-affected> (Only affects Firefox >= 4)
+	- iceweasel <unfixed>
+	[lenny] - iceweasel <not-affected> (Only affects Firefox >= 4)
+	[squeeze] - iceweasel <not-affected> (Only affects Firefox >= 4)
+	- iceape <not-affected> (Only affects Firefox >= 4)
 CVE-2011-3000
 	RESERVED
+	- icedove <unfixed>
+	- xulrunner <removed>
+	- iceweasel <unfixed>
+	[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
+	- iceape <unfixed>
+	[lenny] - iceape <not-affected> (Only a stub package)
 CVE-2011-2999
 	RESERVED
+	- icedove <unfixed>
+	- xulrunner <removed>
+	- iceweasel <unfixed>
+	[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
+	- iceape <unfixed>
+	[lenny] - iceape <not-affected> (Only a stub package)
 CVE-2011-2998
 	RESERVED
 CVE-2011-2997
 	RESERVED
+	- xulrunner <not-affected> (Only affects Firefox 6)
+	- iceweasel <unfixed>
+	[lenny] - iceweasel <not-affected> (Only affects Firefox 6)
+	[squeeze] - iceweasel <not-affected> (Only affects Firefox 6)
+	- iceape <not-affected> (Only affects Firefox 6)
 CVE-2011-2996
 	RESERVED
+	- icedove <unfixed>
+	- xulrunner <removed>
+	- iceweasel 4.0-1
+	[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
+	- iceape <unfixed>
+	[lenny] - iceape <not-affected> (Only a stub package)
+	NOTE: Only affects firefox 3.6 code base, not 4.0 oder later
 CVE-2011-2995
 	RESERVED
+	- icedove <unfixed>
+	- xulrunner <removed>
+	- iceweasel <unfixed>
+	[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
+	- iceape <unfixed>
+	[lenny] - iceape <not-affected> (Only a stub package)
 CVE-2011-2994
 	RESERVED
 CVE-2011-2993 (The implementation of digital signatures for JAR files in Mozilla ...)
@@ -3656,6 +3700,12 @@
 	- icedove 3.1.11-1
 CVE-2011-2372
 	RESERVED
+	- icedove <unfixed>
+	- xulrunner <removed>
+	- iceweasel <unfixed>
+	[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
+	- iceape <unfixed>
+	[lenny] - iceape <not-affected> (Only a stub package)
 CVE-2011-2371 (Integer overflow in the Array.reduceRight method in Mozilla Firefox ...)
 	{DSA-2273-3 DSA-2269-1 DSA-2268-1}
 	- xulrunner <removed>