Author: jmm
Date: 2013-10-16 11:03:17 +0000 (Wed, 16 Oct 2013)
New Revision: 24025

Modified:
   data/CVE/list
Log:
more openjkd triage


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2013-10-16 10:41:39 UTC (rev 24024)
+++ data/CVE/list       2013-10-16 11:03:17 UTC (rev 24025)
@@ -429,6 +429,8 @@
        RESERVED
 CVE-2013-5852
        RESERVED
+       - openjdk-6 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
+       - openjdk-7 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
 CVE-2013-5851
        RESERVED
 CVE-2013-5850
@@ -461,6 +463,8 @@
        RESERVED
 CVE-2013-5838
        RESERVED
+       - openjdk-6 <not-affected> (Only affects Java 7)
+       - openjdk-7 <unfixed>
 CVE-2013-5837
        RESERVED
 CVE-2013-5836
@@ -491,6 +495,8 @@
        RESERVED
 CVE-2013-5825
        RESERVED
+       - openjdk-6 <unfixed>
+       - openjdk-7 <unfixed>
 CVE-2013-5824
        RESERVED
        - openjdk-6 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
@@ -523,6 +529,8 @@
        RESERVED
 CVE-2013-5812
        RESERVED
+       - openjdk-6 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
+       - openjdk-7 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
 CVE-2013-5811
        RESERVED
 CVE-2013-5810
@@ -550,10 +558,15 @@
        - openjdk-7 <not-affected> (Specific to MacOS X)
 CVE-2013-5804
        RESERVED
+       - openjdk-6 <unfixed> (unimportant)
+       - openjdk-7 <unfixed> (unimportant)
+       NOTE: Javadoc comments can contain arbitrary HTML
 CVE-2013-5803
        RESERVED
 CVE-2013-5802
        RESERVED
+       - openjdk-6 <unfixed>
+       - openjdk-7 <unfixed>
 CVE-2013-5801
        RESERVED
 CVE-2013-5800
@@ -616,12 +629,16 @@
        RESERVED
 CVE-2013-5778
        RESERVED
+       - openjdk-6 <unfixed>
+       - openjdk-7 <unfixed>
 CVE-2013-5777
        RESERVED
        - openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
        - openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5776
        RESERVED
+       - openjdk-6 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
+       - openjdk-7 <not-affected> (Deployment components not part of OpenJDK, 
only present in Oracle Java)
 CVE-2013-5775
        RESERVED
        - openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
@@ -5006,7 +5023,8 @@
 CVE-2013-4003 (Multiple cross-site scripting (XSS) vulnerabilities in IBM 
TRIRIGA ...)
        NOT-FOR-US: IBM TRIRIGA
 CVE-2013-4002 (Unspecified vulnerability in the Java Runtime Environment (JRE) 
in IBM ...)
-       NOT-FOR-US: IBM JDK
+       - openjdk-6 <unfixed>
+       - openjdk-7 <unfixed>
 CVE-2013-4001
        RESERVED
 CVE-2013-4000
@@ -5356,6 +5374,8 @@
        RESERVED
 CVE-2013-3829
        RESERVED
+       - openjdk-6 <unfixed>
+       - openjdk-7 <unfixed>
 CVE-2013-3828
        RESERVED
 CVE-2013-3827


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to