[Secure-testing-commits] r38340 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-12-15 22:33:39 +0000 (Tue, 15 Dec 2015)
New Revision: 38340

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
new iceweasel issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-15 21:10:39 UTC (rev 38339)
+++ data/CVE/list	2015-12-15 22:33:39 UTC (rev 38340)
@@ -5080,50 +5080,103 @@
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg04731.html
 CVE-2015-7223
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-148/
 CVE-2015-7222
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-147/
+	NOTE: Probably specific to Android
 CVE-2015-7221
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-144/
 CVE-2015-7220
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-144/
 CVE-2015-7219
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-142/
 CVE-2015-7218
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-142/
 CVE-2015-7217
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-143/
 CVE-2015-7216
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-143/
 CVE-2015-7215
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-140/
 CVE-2015-7214
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-149/
 CVE-2015-7213
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-146/
 CVE-2015-7212
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-139/
 CVE-2015-7211
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-141/
 CVE-2015-7210
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-138/
 CVE-2015-7209
 	RESERVED
 CVE-2015-7208
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-137/
 CVE-2015-7207
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-136/
 CVE-2015-7206
 	RESERVED
 CVE-2015-7205
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-145/
 CVE-2015-7204
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-135/
 CVE-2015-7203
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-144/
 CVE-2015-7202
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-134/
 CVE-2015-7201
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	- icedove <unfixed>
+	[squeeze] - icedove <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-134/
 CVE-2015-7200 (The CryptoKey interface implementation in Mozilla Firefox before 42.0 ...)
 	{DSA-3410-1 DSA-3393-1}
 	- iceweasel 38.4.0esr-1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2015-12-15 21:10:39 UTC (rev 38339)
+++ data/dsa-needed.txt	2015-12-15 22:33:39 UTC (rev 38340)
@@ -33,6 +33,8 @@
 --
 icedtea-web
 --
+iceweasel (jmm)
+--
 imagemagick/oldstable
   no-dsa bugs CVE-2014-8354 CVE-2014-8355 CVE-2014-8562 CVE-2014-8716
   should be fixed along