[Secure-testing-commits] r28069 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2014-08-03 09:14:12 +0000 (Sun, 03 Aug 2014)
New Revision: 28069

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-08-03 08:51:34 UTC (rev 28068)
+++ data/CVE/list	2014-08-03 09:14:12 UTC (rev 28069)
@@ -1377,6 +1377,7 @@
 	NOTE: Not exploitable with the block sizes used in kernel images
 CVE-2014-4607
 	RESERVED
+	{DSA-2995-1}
 	- lzo <removed>
 	- lzo2 2.08-1 (bug #752861)
 CVE-2014-4606 (Cross-site scripting (XSS) vulnerability in redirect_to_zeenshare.php ...)
@@ -9215,21 +9216,21 @@
 	[squeeze] - icedove <end-of-life>
 	NOTE: https://www.mozilla.org/security/announce/2014/mfsa2014-65.html
 CVE-2014-1557 (The ConvolveHorizontally function in Skia, as used in Mozilla Firefox ...)
-	{DSA-2986-1}
+	{DSA-2996-1 DSA-2986-1}
 	- iceweasel 31.0-1
 	[squeeze] - iceweasel <end-of-life>
 	- icedove <unfixed>
 	[squeeze] - icedove <end-of-life>
 	NOTE: http://www.mozilla.org/security/announce/2014/mfsa2014-64.html
 CVE-2014-1556 (Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and ...)
-	{DSA-2986-1}
+	{DSA-2996-1 DSA-2986-1}
 	- iceweasel 31.0-1
 	[squeeze] - iceweasel <end-of-life>
 	- icedove <unfixed>
 	[squeeze] - icedove <end-of-life>
 	NOTE: https://www.mozilla.org/security/announce/2014/mfsa2014-62.html
 CVE-2014-1555 (Use-after-free vulnerability in the nsDocLoader::OnProgress function ...)
-	{DSA-2986-1}
+	{DSA-2996-1 DSA-2986-1}
 	- iceweasel 31.0-1
 	[squeeze] - iceweasel <end-of-life>
 	- icedove <unfixed>
@@ -9272,7 +9273,7 @@
 	[wheezy] - iceweasel <not-affected> (Only affects releases after ESR24)
 	[squeeze] - iceweasel <end-of-life>
 CVE-2014-1547 (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...)
-	{DSA-2986-1}
+	{DSA-2996-1 DSA-2986-1}
 	- iceweasel 31.0-1
 	[squeeze] - iceweasel <end-of-life>
 	- icedove <unfixed>
@@ -9292,7 +9293,7 @@
 	[squeeze] - icedove <end-of-life>
 	NOTE: Only the Wheezy builds use the bundled nspr
 CVE-2014-1544 (Use-after-free vulnerability in the CERT_DestroyCertificate function ...)
-	{DSA-2986-1}
+	{DSA-2996-1 DSA-2986-1}
 	- nss 2:3.16.3-1
 	- iceweasel 31.0-1
 	[squeeze] - iceweasel <end-of-life>