[Secure-testing-commits] r27211 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-06-11 06:29:32 +0000 (Wed, 11 Jun 2014)
New Revision: 27211

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
mozilla updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-11 06:07:13 UTC (rev 27210)
+++ data/CVE/list	2014-06-11 06:29:32 UTC (rev 27211)
@@ -6178,48 +6178,82 @@
 	RESERVED
 CVE-2014-1545
 	RESERVED
+	- nspr <unfixed>
+	- iceweasel 30.0-1
+	- icedove <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	[squeeze] - icedove <end-of-life>
+	NOTE: Only the Wheezy builds use the bundled nspr
 CVE-2014-1544
 	RESERVED
 CVE-2014-1543
 	RESERVED
-	- iceweasel 30.0-1
-	[squeeze] - iceweasel <end-of-life>
+	- iceweasel <not-affected> (Only affects Windows 8)
+	- icedove <not-affected> (Only affects Windows 8)
 CVE-2014-1542
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
+	[wheezy] - iceweasel <not-affected> (Doesn't affect ESR24)
 	[squeeze] - iceweasel <end-of-life>
+	[wheezy] - icedove <not-affected> (Doesn't affect ESR24)
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1541
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
 	[squeeze] - iceweasel <end-of-life>
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1540
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
+	[wheezy] - iceweasel <not-affected> (Doesn't affect ESR24)
 	[squeeze] - iceweasel <end-of-life>
+	[wheezy] - icedove <not-affected> (Doesn't affect ESR24)
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1539
 	RESERVED
+	- iceweasel <not-affected> (Only affects Mac OS X)
+	- icedove <not-affected> (Only affects Mac OS X)
 CVE-2014-1538
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
 	[squeeze] - iceweasel <end-of-life>
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1537
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
+	[wheezy] - iceweasel <not-affected> (Doesn't affect ESR24)
 	[squeeze] - iceweasel <end-of-life>
+	[wheezy] - icedove <not-affected> (Doesn't affect ESR24)
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1536
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
+	[wheezy] - iceweasel <not-affected> (Doesn't affect ESR24)
 	[squeeze] - iceweasel <end-of-life>
+	[wheezy] - icedove <not-affected> (Doesn't affect ESR24)
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1535
 	RESERVED
 CVE-2014-1534
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
+	[wheezy] - iceweasel <not-affected> (Doesn't affect ESR24)
 	[squeeze] - iceweasel <end-of-life>
+	[wheezy] - icedove <not-affected> (Doesn't affect ESR24)
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1533
 	RESERVED
 	- iceweasel 30.0-1
+	- icedove <unfixed>
 	[squeeze] - iceweasel <end-of-life>
+	[squeeze] - icedove <end-of-life>
 CVE-2014-1532 (Use-after-free vulnerability in the ...)
 	{DSA-2924-1 DSA-2918-1}
 	- iceweasel 24.5.0esr-1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2014-06-11 06:07:13 UTC (rev 27210)
+++ data/dsa-needed.txt	2014-06-11 06:29:32 UTC (rev 27211)
@@ -19,6 +19,8 @@
 --
 fail2ban
 --
+icedove
+--
 iceweasel
 --
 icinga