Secure testing commits - Jun 2009 - r12141 - data/CVE

Author: nion
Date: 2009-06-17 00:13:22 +0000 (Wed, 17 Jun 2009)
New Revision: 12141

Modified:
   data/CVE/list
Log:
NFUs/itp

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-06-16 23:24:30 UTC (rev 12140)
+++ data/CVE/list	2009-06-17 00:13:22 UTC (rev 12141)
@@ -1,27 +1,27 @@
 CVE-2009-2073 (Cross-site request forgery (CSRF) vulnerability in Linksys
WRT160N ...)
-	TODO: check
+	NOT-FOR-US: Linksys
 CVE-2009-2072 (Apple Safari does not require a cached certificate before
displaying a ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2009-2071 (Google Chrome before 1.0.154.53 displays a cached certificate
for a ...)
-	TODO: check
+	- chromium-browser <itp> (bug #520324)
 CVE-2009-2070 (Opera displays a cached certificate for a (1) 4xx or (2) 5xx
CONNECT ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2009-2069 (Microsoft Internet Explorer before 8 displays a cached
certificate for ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2009-2068 (Google Chrome detects http content in https web pages only when
the ...)
-	TODO: check
+	- chromium-browser <itp> (bug #520324)
 CVE-2009-2067 (Opera detects http content in https web pages only when the
top-level ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2009-2066 (Apple Safari detects http content in https web pages only when
the ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2009-2065 (Mozilla Firefox 3.0.10, and possibly other versions, detects
http ...)
 	TODO: check
 CVE-2009-2064 (Microsoft Internet Explorer 8, and possibly other versions,
detects ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2009-2063 (Opera, possibly before 9.25, processes a 3xx HTTP CONNECT
response ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2009-2062 (Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response
before ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2009-2061 (Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT
response ...)
 	TODO: check
 CVE-2009-2060 (src/net/http/http_transaction_winhttp.cc in Google Chrome before
...)