Author: iuculano
Date: 2011-01-19 10:40:41 +0000 (Wed, 19 Jan 2011)
New Revision: 15927
Modified:
data/CVE/list
Log:
chromium/webkit/libvpx issues
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2011-01-19 09:14:46 UTC (rev 15926)
+++ data/CVE/list 2011-01-19 10:40:41 UTC (rev 15927)
@@ -1,50 +1,63 @@
CVE-2011-0485 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser 9.0.597.45~r70550-1
+ [squeeze] - chromium-browser <not-affected>
+ - webkit <not-affected> (chromium specific)
CVE-2011-0484 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/75082
+ NOTE: http://trac.webkit.org/changeset/75084
CVE-2011-0483 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/74787
CVE-2011-0482 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/74779
CVE-2011-0481 (Buffer overflow in Google Chrome before 8.0.552.237 and Chrome
OS ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser <not-affected> (Chrome PDF plugin)
+ - webkit <not-affected> (Chrome PDF plugin)
CVE-2011-0480 (Multiple buffer overflows in the Vorbis decoder in Google
Chrome ...)
TODO: check, might affects libvorbis, needs to be checked by code fix
CVE-2011-0479 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser 9.0.597.45~r70550-1
+ [squeeze] - chromium-browser <not-affected>
+ - webkit <not-affected> (chromium specific)
CVE-2011-0478 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/74636
CVE-2011-0477 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
+ - webkit <not-affected> (chromium specific)
CVE-2011-0476 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser <not-affected> (Chrome PDF plugin)
+ - webkit <not-affected> (Chrome PDF plugin)
CVE-2011-0475 (Use-after-free vulnerability in Google Chrome before
8.0.552.237 and ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser <not-affected> (Chrome PDF plugin)
+ - webkit <not-affected> (Chrome PDF plugin)
CVE-2011-0474 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/74574
CVE-2011-0473 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/73927
+ NOTE: http://trac.webkit.org/changeset/73937
CVE-2011-0472 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser <not-affected> (Chrome PDF plugin)
+ - webkit <not-affected> (Chrome PDF plugin)
CVE-2011-0471 (The node-iteration implementation in Google Chrome before
8.0.552.237 ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-5
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/73559
+ NOTE: http://trac.webkit.org/changeset/73620
CVE-2011-0470 (Google Chrome before 8.0.552.237 and Chrome OS before
8.0.552.344 do ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser 9.0.597.45~r70550-1
+ [squeeze] - chromium-browser <not-affected>
+ - webkit <not-affected> (chromium specific)
CVE-2011-0469
RESERVED
CVE-2011-0468
@@ -1546,20 +1559,25 @@
- chromium-browser 5.0.375.29~r46008-1
- webkit <not-affected> (never embedded libxml2's xpath.c)
CVE-2010-4493 (Use-after-free vulnerability in Google Chrome before
8.0.552.215 ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-3
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/72013
CVE-2010-4492 (Use-after-free vulnerability in Google Chrome before
8.0.552.215 ...)
- - chromium-browser <undetermined>
+ - chromium-browser 6.0.472.63~r59945-3
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/71686
CVE-2010-4491 (Google Chrome before 8.0.552.215 does not properly restrict
privileged ...)
- - chromium-browser <undetermined>
+ - chromium-browser 9.0.597.45~r70550-1
+ [squeeze] - chromium-browser <not-affected>
- webkit <undetermined>
+ NOTE: http://trac.webkit.org/changeset/71533
CVE-2010-4490 (Google Chrome before 8.0.552.215 allows remote attackers to
cause a ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser 6.0.472.63~r59945-3
+ - webkit <not-affected> (chromium specific issue)
CVE-2010-4489 (Google Chrome before 8.0.552.215 does not properly handle WebM
video, ...)
- - chromium-browser <undetermined>
- - webkit <undetermined>
+ - chromium-browser <not-affected>
+ - webkit <not-affected>
+ - libvpx 0.9.5-1 (bug #610510)
CVE-2010-4488 (Google Chrome before 8.0.552.215 does not properly handle HTTP
proxy ...)
- chromium-browser <unfixed> (unimportant)
[squeeze] - chromium-browser <not-affected>
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
