Author: joeyh Date: 2009-05-09 21:14:15 +0000 (Sat, 09 May 2009) New Revision: 11859 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-05-09 19:27:01 UTC (rev 11858) +++ data/CVE/list 2009-05-09 21:14:15 UTC (rev 11859) @@ -813,36 +813,46 @@ [lenny] - xulrunner <not-affected> (introduced in 1.9.0.9) [squeeze] - xulrunner <not-affected> (introduced in 1.9.0.9) CVE-2009-1312 (Mozilla Firefox before 3.0.9 and SeaMonkey do not block javascript: ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1311 (Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1310 (Cross-site scripting (XSS) vulnerability in the MozSearch plugin ...) - iceweasel 3.0.9-1 [etch] - iceweasel <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1309 (Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1308 (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1307 (The view-source: URI implementation in Mozilla Firefox before 3.0.9, ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1306 (The jar: URI implementation in Mozilla Firefox before 3.0.9, ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1305 (The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1304 (The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1303 (The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1302 (The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-1301 (Integer signedness error in the store_id3_text function in the ID3v2 ...) @@ -3371,6 +3381,7 @@ CVE-2009-0653 (OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an ...) - openssl 0.9.8-1 (bug #517791) CVE-2009-0652 (The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox ...) + {DSA-1797-1} - xulrunner 1.9.0.9-1 [etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer covered by security support) CVE-2009-0651 (Unspecified vulnerability in the Veritas network daemon (aka vnetd) in ...)