[Secure-testing-commits] r29322 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-10-08 10:57:28 +0000 (Wed, 08 Oct 2014)
New Revision: 29322

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
new chromium/v8 issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-08 10:51:51 UTC (rev 29321)
+++ data/CVE/list	2014-10-08 10:57:28 UTC (rev 29322)
@@ -10933,28 +10933,59 @@
 	RESERVED
 CVE-2014-3199
 	RESERVED
+	- libv8 <removed>
+	[wheezy] - libv8 <no-dsa> (Minor issue, Chromium in Wheezy uses its own fixed copy)
+	[squeeze] - libv8 <end-of-life> (Unsupported in squeeze-lts)
+	- libv8-3.14 <unfixed>
 CVE-2014-3198
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3197
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3196
 	RESERVED
+	- chromium-browser <not-affected> (Only affects Windows)
 CVE-2014-3195
 	RESERVED
+	- libv8 <removed>
+	[wheezy] - libv8 <no-dsa> (Minor issue, Chromium in Wheezy uses its own fixed copy)
+	[squeeze] - libv8 <end-of-life> (Unsupported in squeeze-lts)
+	- libv8-3.14 <unfixed>
 CVE-2014-3194
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3193
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3192
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3191
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3190
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3189
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
 CVE-2014-3188
 	RESERVED
+	- chromium-browser 37.0.2062-1
+	[squeeze] - chromium-browser <end-of-life>
+	- libv8 <removed>
+	[wheezy] - libv8 <no-dsa> (Minor issue, Chromium in Wheezy uses its own fixed copy)
+	[squeeze] - libv8 <end-of-life> (Unsupported in squeeze-lts)
+	- libv8-3.14 <unfixed>
 CVE-2014-3187
 	RESERVED
 CVE-2014-3186 (Buffer overflow in the picolcd_raw_event function in ...)

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2014-10-08 10:51:51 UTC (rev 29321)
+++ data/dsa-needed.txt	2014-10-08 10:57:28 UTC (rev 29322)
@@ -14,6 +14,8 @@
 --
 asterisk
 --
+chromium-browser
+--
 libgcrypt11 (carnil)
 --
 liblivemedia (geissert)