[Secure-testing-commits] r37544 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-11-03 21:50:32 +0000 (Tue, 03 Nov 2015)
New Revision: 37544

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
new mozilla, nss, nspr issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-11-03 21:47:24 UTC (rev 37543)
+++ data/CVE/list	2015-11-03 21:50:32 UTC (rev 37544)
@@ -2265,28 +2265,48 @@
 	RESERVED
 CVE-2015-7200
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7199
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7198
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7197
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7196
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7195
 	RESERVED
+	- iceweasel <not-affected> (ESR38 series not affected)
 CVE-2015-7194
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7193
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7192
 	RESERVED
+	- iceweasel <not-affected> (Only affects Firefox on MacOS)
 CVE-2015-7191
 	RESERVED
+	- iceweasel <not-affected> (Only affects Firefox on Android)
 CVE-2015-7190
 	RESERVED
+	- iceweasel <not-affected> (Only affects Firefox on Android)
 CVE-2015-7189
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7188
 	RESERVED
 	- iceweasel <unfixed>
@@ -2309,16 +2329,17 @@
 	[squeeze] - iceweasel <end-of-life>
 	- nspr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-133/
-	TODO: check
 CVE-2015-7182
 	RESERVED
+	- nss <unfixed>
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
 CVE-2015-7181 [ASan: use-after-poison in sec_asn1d_parse_leaf()]
 	RESERVED
+	- nss <unfixed>
 	- iceweasel <unfixed>
 	[squeeze] - iceweasel <end-of-life>
-	- nss <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-133/
-	TODO: check
 CVE-2015-7180 (The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before ...)
 	{DSA-3365-1}
 	- iceweasel 38.3.0esr-1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2015-11-03 21:47:24 UTC (rev 37543)
+++ data/dsa-needed.txt	2015-11-03 21:50:32 UTC (rev 37544)
@@ -23,6 +23,8 @@
 --
 icedtea-web
 --
+iceweasel (jmm)
+--
 imagemagick/oldstable
   no-dsa bugs CVE-2014-8354 CVE-2014-8355 CVE-2014-8562 CVE-2014-8716
   should be fixed along
@@ -47,6 +49,10 @@
 --
 mediawiki
 --
+nspr
+--
+nss
+--
 openjdk-6 (jmm)
 --
 openswan (corsac)