[Secure-testing-commits] r22382 - data/CVE

[Raphael Geissert]

Author: atomo64-guest
Date: 2013-05-28 08:18:11 +0000 (Tue, 28 May 2013)
New Revision: 22382

Modified:
   data/CVE/list
Log:
struts issues do not affect 1.2


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-28 07:07:44 UTC (rev 22381)
+++ data/CVE/list	2013-05-28 08:18:11 UTC (rev 22382)
@@ -3476,8 +3476,9 @@
 	- cgit <itp> (bug #515793)
 CVE-2013-2116
 	RESERVED
-CVE-2013-2115
+CVE-2013-2115 [incomplete fix for CVE-2013-1966]
 	RESERVED
+	- libstruts1.2-java <not-affected> (Only affects Struts 2)
 CVE-2013-2114 [mediawiki chunked uploads allow arbitrary data to be dropped on the server]
 	RESERVED
 	- mediawiki 1:1.19.7+dfsg-1
@@ -4024,8 +4025,10 @@
 	NOTE: oC >= 4.5 only
 CVE-2013-1966
 	RESERVED
+	- libstruts1.2-java <not-affected> (Only affects Struts 2)
 CVE-2013-1965
 	RESERVED
+	- libstruts1.2-java <not-affected> (Only affects Struts 2)
 CVE-2013-1964 (Xen 4.0.x and 4.1.x incorrectly releases a grant reference when ...)
 	{DSA-2666-1}
 	- xen 4.1.4-3