[Secure-testing-commits] r19448 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-06-07 13:19:47 +0000 (Thu, 07 Jun 2012)
New Revision: 19448

Modified:
   data/CVE/list
Log:
new roundcube issue
new CVE ID for webgl issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-06-07 12:35:58 UTC (rev 19447)
+++ data/CVE/list	2012-06-07 13:19:47 UTC (rev 19448)
@@ -1,5 +1,5 @@
 CVE-2012-3105 (The glBufferData function in the WebGL implementation in Mozilla ...)
-	TODO: check
+	- iceweasel 10.0.5esr-1
 CVE-2012-3104
 	RESERVED
 CVE-2011-5093 (Best Practical Solutions RT 4.x before 4.0.6 does not properly ...)
@@ -4351,7 +4351,7 @@
 CVE-2012-1254 (Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier ...)
 	TODO: check
 CVE-2012-1253 (Cross-site scripting (XSS) vulnerability in Roundcube Webmail before ...)
-	TODO: check
+	- roundcube 0.7-1
 CVE-2012-1252 (Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows ...)
 	TODO: check
 CVE-2012-1251 (Opera before 9.63 does not properly verify X.509 certificates from SSL ...)
@@ -13490,7 +13490,6 @@
 	NOTE: http://git.gnome.org/browse/libxml2/commit/?id=d8e1faeaa99c7a7c07af01c1c72de352eb590a3e
 CVE-2011-3101 (Google Chrome before 19.0.1084.46 on Linux does not properly mitigate ...)
 	- chromium-browser <unfixed>
-	- iceweasel 10.0.5esr-1
 CVE-2011-3100 (Google Chrome before 19.0.1084.46 does not properly draw dash paths, ...)
 	- chromium-browser <unfixed>
 CVE-2011-3099 (Use-after-free vulnerability in the PDF functionality in Google Chrome ...)