[Secure-testing-commits] r22111 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-05-01 05:50:58 +0000 (Wed, 01 May 2013)
New Revision: 22111

Modified:
   data/CVE/list
Log:
update CVE-2012-5083, thanks Steven Chamberlain

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-01 05:46:07 UTC (rev 22110)
+++ data/CVE/list	2013-05-01 05:50:58 UTC (rev 22111)
@@ -11410,8 +11410,9 @@
 	- openjdk-6 6b24-1.11.5-0ubuntu1 (bug #690774)
 	- openjdk-7 7u3-2.1.3-1 (bug #690774)
 CVE-2012-5083 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
-	- openjdk-6 <unfixed> (bug #690774)
-	- openjdk-7 <unfixed> (bug #690774)
+	- openjdk-6 <not-affected> (Specific to Oracle Java, not present in IcedTea)
+	- openjdk-7 <not-affected> (Specific to Oracle Java, not present in IcedTea)
+	NOTE: Due to the vague disclosure policy by Oracle the exact nature is unknown but since no patch landed in icedtea, we consider it not-affected
 CVE-2012-5082 (Unspecified vulnerability in the JavaFX component in Oracle Java SE ...)
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)