[Secure-testing-commits] r11543 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-04-02 21:22:11 +0000 (Thu, 02 Apr 2009)
New Revision: 11543

Modified:
   data/CVE/list
Log:
bouncycastle is in the archive


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-04-02 21:14:10 UTC (rev 11542)
+++ data/CVE/list	2009-04-02 21:22:11 UTC (rev 11543)
@@ -365,15 +365,15 @@
 CVE-2008-6532 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...)
 	TODO: check
 CVE-2008-6531 (The WebWork 1 web application framework in Atlassian JIRA before ...)
-	TODO: check
+ 	NOT-FOR-US: Atlassian JIRA 
 CVE-2008-6530 (Unrestricted file upload vulnerability in editimage.php in ...)
 	NOT-FOR-US: eZoneScripts Living Local
 CVE-2008-6529 (Cross-site scripting (XSS) vulnerability in listtest.php in ...)
-	NOT-FOR-US: eZoneScripts Living Local
+ 	NOT-FOR-US: eZoneScripts Living Local
 CVE-2008-6528 (NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the ...)
 	NOT-FOR-US: NTFS TmaxSoft JEUS 5
 CVE-2007-6721 (The Legion of the Bouncy Castle Java Cryptography API before release ...)
-	NOT-FOR-US: Bouncy Castle Java Cryptography API
+	- bouncycastle 1.38-1
 CVE-2009-1107 (The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime ...)
 	- sun-java6 6-13-1
 	[lenny] - sun-java6 <no-dsa> (Non-free not supported)