[Secure-testing-commits] r21148 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-02-05 07:24:12 +0000 (Tue, 05 Feb 2013)
New Revision: 21148

Modified:
   data/CVE/list
Log:
record unfixed states for openjdk-7 as per the latest icedtea 1.2 release
however, there are still many fixes missing or unclear...


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-02-05 00:44:38 UTC (rev 21147)
+++ data/CVE/list	2013-02-05 07:24:12 UTC (rev 21148)
@@ -229,17 +229,21 @@
 	- openjdk-7 <not-affected> (Icedtea uses a different sound implementation than Oracle Java)
 CVE-2013-1480 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-1479 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	TODO: check
 CVE-2013-1478 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-1477 (Unspecified vulnerability in the JavaFX component in Oracle Java SE ...)
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-1476 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-1475 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-1474 (Unspecified vulnerability in the JavaFX component in Oracle Java SE ...)
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
@@ -2849,6 +2853,7 @@
 	NOT-FOR-US: VMware vCenter Server Appliance
 CVE-2013-0450 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0449 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	TODO: check
 CVE-2013-0448 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
@@ -2865,12 +2870,16 @@
 	TODO: check
 CVE-2013-0443 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0442 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0441 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0440 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0439 (Unspecified vulnerability in the JavaFX component in Oracle Java SE ...)
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
@@ -2884,12 +2893,16 @@
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-0435 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0434 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0433 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0432 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0431 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	TODO: check
 CVE-2013-0430 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
@@ -2897,16 +2910,22 @@
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-0429 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0428 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0427 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0426 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0425 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0424 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 6b27-1.12-1
+	- openjdk-7 <unfixed>
 CVE-2013-0423 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)