[Secure-testing-commits] r34145 - data/CVE

[Alessandro Ghedini]

Author: ghedo
Date: 2015-05-09 10:44:52 +0000 (Sat, 09 May 2015)
New Revision: 34145

Modified:
   data/CVE/list
Log:
Add chromium-browser fixed versions for CVE-2014-814{6,7}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-09 10:44:43 UTC (rev 34144)
+++ data/CVE/list	2015-05-09 10:44:52 UTC (rev 34145)
@@ -14515,12 +14515,16 @@
 	RESERVED
 	- icu 52.1-9 (bug #784773)
 	[wheezy] - icu <not-affected> (Vulnerable code not present)
-	TODO: check + other source packages embedding icu
+	- chromium-browser 42.0.2311.135-1
+	[jessie] - chromium-browser 42.0.2311.135-1~deb8u1
+	[wheezy] - chromium-browser <not-affected> (Vulnerable code not present)
 CVE-2014-8146 [Heap overflow]
 	RESERVED
 	- icu 52.1-9 (bug #784773)
 	[wheezy] - icu <not-affected> (Vulnerable code not present)
-	TODO: check + other source packages embedding icu
+	- chromium-browser 42.0.2311.135-1
+	[jessie] - chromium-browser 42.0.2311.135-1~deb8u1
+	[wheezy] - chromium-browser <not-affected> (Vulnerable code not present)
 CVE-2014-8145 (Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 ...)
 	{DSA-3112-1 DLA-128-1}
 	- sox 14.4.1-5 (bug #773720)