[Secure-testing-commits] r30160 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-11-19 19:16:32 +0000 (Wed, 19 Nov 2014)
New Revision: 30160

Modified:
   data/CVE/list
Log:
more chromium CVE IDs
remove the TODO entries, since we ship the most recent version
  in sid/stable, all issues affect Debian's version with the
  exception of some proprietary Chrome bits


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-19 19:12:20 UTC (rev 30159)
+++ data/CVE/list	2014-11-19 19:16:32 UTC (rev 30160)
@@ -2409,58 +2409,58 @@
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=433500 (private)
-	TODO: check
 CVE-2014-7909 [Uninitialized memory read in Skia]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=391001 (private)
-	TODO: check
 CVE-2014-7908 [Integer overflow in media]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=425980 (private)
-	TODO: check
 CVE-2014-7907 [Use-after-free in blink]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=424453 (private)
-	TODO: check
 CVE-2014-7906 [Use-after-free in pepper plugins]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=423030 (private)
-	TODO: check
 CVE-2014-7905 [Flaw allowing navigation to intents that do not have the BROWSABLE category]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=421817 (private)
-	TODO: check
 CVE-2014-7904 [Buffer overflow in Skia]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=418161 (private)
-	TODO: check
 CVE-2014-7903
 	RESERVED
+	- chromium-browser <unfixed>
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-7902
 	RESERVED
+	- chromium-browser <unfixed>
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-7901
 	RESERVED
+	- chromium-browser <unfixed>
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-7900
 	RESERVED
+	- chromium-browser <unfixed>
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-7899 [Address bar spoofing]
 	RESERVED
 	- chromium-browser <unfixed>
 	[squeeze] - chromium-browser <end-of-life>
 	NOTE: http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html
 	NOTE: https://chromium.googlesource.com/chromium/src/+/5cfbddc9cc972f5133f26664dbf5810bb569cd04
-	TODO: check
 CVE-2014-7898
 	RESERVED
 CVE-2014-7897