[Secure-testing-commits] r20959 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-01-18 08:03:29 +0000 (Fri, 18 Jan 2013)
New Revision: 20959

Modified:
   data/CVE/list
Log:
new vbox issue
new java issue (not in stable)
new xen kernel issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-17 21:46:38 UTC (rev 20958)
+++ data/CVE/list	2013-01-18 08:03:29 UTC (rev 20959)
@@ -2398,12 +2398,15 @@
 CVE-2013-0423
 	RESERVED
 CVE-2013-0422 (Multiple vulnerabilities in Oracle Java 7 before Update 11 allow ...)
-	TODO: check
+	- openjdk-6 <not-affected> (Only affects Java 7)
+	- openjdk-7 <unfixed>
 	NOTE: Exploitable on Linux http://www.openwall.com/lists/oss-security/2013/01/11/1
 CVE-2013-0421
 	RESERVED
 CVE-2013-0420 (Unspecified vulnerability in the VirtualBox component in Oracle ...)
 	TODO: check
+	- virtualbox <unfixed> (bug #698292)
+	- virtualbox-ose <removed>
 CVE-2013-0419
 	RESERVED
 CVE-2013-0418 (Unspecified vulnerability in the Oracle Outside In Technology ...)
@@ -2880,6 +2883,8 @@
 	RESERVED
 CVE-2013-0190
 	RESERVED
+	- linux <unfixed>
+	- linux-2.6 <removed>
 CVE-2013-0189
 	RESERVED
 CVE-2013-0191 [pam-pgsql NULL password handling issue]