[Secure-testing-commits] r48423 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-01-26 13:08:38 +0000 (Thu, 26 Jan 2017)
New Revision: 48423

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
new chromium issues (also two ffmpeg issues)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-26 13:00:26 UTC (rev 48422)
+++ data/CVE/list	2017-01-26 13:08:38 UTC (rev 48423)
@@ -1733,46 +1733,92 @@
 	RESERVED
 CVE-2017-5026
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5025
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
+	- ffmpeg <unfixed>
 CVE-2017-5024
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
+	- ffmpeg <unfixed>
 CVE-2017-5023
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5022
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5021
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5020
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5019
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5018
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5017
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5016
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5015
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5014
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5013
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5012
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
+	- libv8 <unfixed> (unimportant)
+	NOTE: libv8 not covered by security support
 CVE-2017-5011
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5010
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5009
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5008
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5007
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5006
 	RESERVED
+	- chromium-browser <unfixed>
+	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-5005 (Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 ...)
 	NOT-FOR-US: Quickheal
 CVE-2016-10108 (Unauthenticated Remote Command injection as root occurs in the Western ...)

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2017-01-26 13:00:26 UTC (rev 48422)
+++ data/dsa-needed.txt	2017-01-26 13:08:38 UTC (rev 48423)
@@ -21,6 +21,8 @@
  John Lightsey from cPanel provided patches for 4 vulnerabilities.
  CVEs asked on oss-sec.
 --
+chromium-browser
+--
 graphicsmagick
 --
 jasper (jmm)