[Secure-testing-commits] r16090 - data/CVE

[Jonathan Wiltshire]

Author: jmw
Date: 2011-02-09 20:00:41 +0000 (Wed, 09 Feb 2011)
New Revision: 16090

Modified:
   data/CVE/list
Log:
openjdk issue probably affects sun-java6, but no source to check
Add notes


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-09 19:55:25 UTC (rev 16089)
+++ data/CVE/list	2011-02-09 20:00:41 UTC (rev 16090)
@@ -2425,6 +2425,10 @@
 CVE-2010-4476 [trivial DoS when parsing strings into Java Double objects]
 	RESERVED
 	- openjdk-6 <unfixed> (bug #612660)
+	- sun-java6 <undetermined>
+	NOTE: Patch http://mail.openjdk.java.net/pipermail/core-libs-dev/2011-February/005795.html
+	NOTE: Oracle http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html
+	NOTE: Original report http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/
 CVE-2010-4475
 	RESERVED
 CVE-2010-4474