joeyh at alioth.debian.org
2007-Oct-20 21:14 UTC
[Secure-testing-commits] r7043 - data/CVE
Author: joeyh
Date: 2007-10-20 21:14:08 +0000 (Sat, 20 Oct 2007)
New Revision: 7043
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2007-10-20 20:44:15 UTC (rev 7042)
+++ data/CVE/list 2007-10-20 21:14:08 UTC (rev 7043)
@@ -781,20 +781,22 @@
RESERVED
CVE-2007-5340
RESERVED
- {DSA-1391-1}
+ {DSA-1392-1 DSA-1391-1}
- iceweasel 2.0.0.8-1
TODO: check other ice*
CVE-2007-5339
RESERVED
- {DSA-1391-1}
+ {DSA-1392-1 DSA-1391-1}
- iceweasel 2.0.0.8-1
TODO: check other ice*
CVE-2007-5338
RESERVED
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1
TODO: check other ice*
CVE-2007-5337
RESERVED
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1
TODO: check other ice*
CVE-2007-5336
@@ -803,6 +805,7 @@
RESERVED
CVE-2007-5334
RESERVED
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1
TODO: check other ice*
CVE-2007-5333
@@ -5116,6 +5119,7 @@
CVE-2007-3512 (Stack-based buffer overflow in Lhaca File Archiver before 1.22
allows ...)
NOT-FOR-US: Lhaca
CVE-2007-3511 (The focus handling for the onkeydown event in Mozilla Firefox
1.5.0.12 ...)
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1 (bug #438873; low)
CVE-2007-3510
RESERVED
@@ -8045,6 +8049,7 @@
[lenny] - asterisk <not-affected> (vulnerable code not present)
NOTE: http://ftp.digium.com/pub/asa/ASA-2007-010.html
CVE-2007-2292 (CRLF injection vulnerability in the Digest Authentication
support for ...)
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1 (low)
[etch] - iceweasel <no-dsa> (Minor issue)
- firefox <removed> (low)
@@ -11024,6 +11029,7 @@
CVE-2007-1096 (Cross-site scripting (XSS) vulnerability in ps_cart.php in
VirtueMart ...)
NOT-FOR-US: VirtueMart
CVE-2007-1095 (Mozilla Firefox does not properly implement JavaScript onUnload
...)
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1 (low; bug #445514)
NOTE: Pending for upcoming security releases
CVE-2007-1094 (Microsoft Internet Explorer 7 allows remote attackers to cause a
...)
@@ -23068,6 +23074,7 @@
CVE-2006-2895 (Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up
to ...)
- mediawiki <not-affected> (Affects only 1.6.0-1.6.6)
CVE-2006-2894 (Mozilla Firefox 1.5.0.4, Mozilla Suite 1.7.13, Mozilla SeaMonkey
...)
+ {DSA-1392-1}
- iceweasel 2.0.0.8-1
NOTE: There are very few scenarios, where this could be exploited
NOTE: We can probably ignore this