[Secure-testing-commits] r24837 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-12-20 06:42:18 +0000 (Fri, 20 Dec 2013)
New Revision: 24837

Modified:
   data/CVE/list
Log:
libv8 fixed
linux fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-12-20 06:35:20 UTC (rev 24836)
+++ data/CVE/list	2013-12-20 06:42:18 UTC (rev 24837)
@@ -422,7 +422,7 @@
 	- linux 3.11.7-1
 	- linux-2.6 <removed>
 CVE-2013-7026 (Multiple race conditions in ipc/shm.c in the Linux kernel before ...)
-	- linux <unfixed>
+	- linux 3.12.5-1
 	- linux-2.6 <removed>
 CVE-2013-7089 [dbg_printhex possible information leak]
 	RESERVED
@@ -2165,17 +2165,20 @@
 	RESERVED
 CVE-2013-6640 (The DehoistArrayIndex function in hydrogen-dehoist.cc (aka ...)
 	{DSA-2811-1}
-	- libv8 <unfixed>
+	- libv8 <removed>
+	- libv8-3.14 3.14.5.8-5
 	- chromium-browser 31.0.1650.63-1
 	[squeeze] - chromium-browser <end-of-life>
 CVE-2013-6639 (The DehoistArrayIndex function in hydrogen-dehoist.cc (aka ...)
 	{DSA-2811-1}
-	- libv8 <unfixed>
+	- libv8 <removed>
+	- libv8-3.14 3.14.5.8-5
 	- chromium-browser 31.0.1650.63-1
 	[squeeze] - chromium-browser <end-of-life>
 CVE-2013-6638 (Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, ...)
 	{DSA-2811-1}
-	- libv8 <unfixed>
+	- libv8 <removed>
+	- libv8-3.14 <unfixed>
 	- chromium-browser 31.0.1650.63-1
 	[squeeze] - chromium-browser <end-of-life>
 CVE-2013-6637 (Multiple unspecified vulnerabilities in Google Chrome before ...)
@@ -2888,7 +2891,7 @@
 CVE-2013-6377
 	REJECTED
 CVE-2013-6376 (The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM ...)
-	- linux <unfixed>
+	- linux 3.12.5-1
 	- linux-2.6 <removed>
 CVE-2013-6375 (Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does ...)
 	- xen <unfixed> (bug #730254)
@@ -2908,10 +2911,10 @@
 CVE-2013-6369
 	RESERVED
 CVE-2013-6368 (The KVM subsystem in the Linux kernel through 3.12.5 allows local ...)
-	- linux <unfixed>
+	- linux 3.12.5-1
 	- linux-2.6 <removed>
 CVE-2013-6367 (The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM ...)
-	- linux <unfixed>
+	- linux 3.12.5-1
 	- linux-2.6 <removed>
 CVE-2013-6363
 	RESERVED
@@ -7047,7 +7050,7 @@
 	NOTE: https://git.kernel.org/linus/04bcef2a83f40c6db24222b27a52892cba39dffb
 	NOTE: http://seclists.org/fulldisclosure/2013/Nov/77
 CVE-2013-4587 (Array index error in the kvm_vm_ioctl_create_vcpu function in ...)
-	- linux <unfixed>
+	- linux 3.12.5-1
 	- linux-2.6 <removed>
 CVE-2013-4586
 	RESERVED
@@ -11676,7 +11679,8 @@
 	{DSA-2695-1}
 	- chromium-browser 27.0.1453.93-1
 	[squeeze] - chromium-browser <end-of-life>
-	- libv8 <unfixed>
+	- libv8 <removed>
+	- libv8-3.14 <unfixed>
 CVE-2013-2837 (Use-after-free vulnerability in the SVG implementation in Google ...)
 	{DSA-2695-1}
 	- chromium-browser 27.0.1453.93-1
@@ -12125,7 +12129,8 @@
 CVE-2013-2633 (Piwik before 1.11 accepts input from a POST request instead of a GET ...)
 	- piwik <itp> (bug #506933)
 CVE-2013-2632 (Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, ...)
-	- libv8 <unfixed>
+	- libv8 <removed>
+	- libv8-3.14 <unfixed>
 CVE-2013-2631
 	RESERVED
 CVE-2013-2630 (Cross-site scripting (XSS) vulnerability in CA Service Desk Manager ...)