[Secure-testing-commits] r24254 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-11-02 07:34:28 +0000 (Sat, 02 Nov 2013)
New Revision: 24254

Modified:
   data/CVE/list
Log:
three CVEs from external check still not clear, mark as undetermined

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-11-02 07:25:53 UTC (rev 24253)
+++ data/CVE/list	2013-11-02 07:34:28 UTC (rev 24254)
@@ -1033,7 +1033,9 @@
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5843 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
-	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
+	- openjdk-6 <undetermined>
+	- openjdk-7 <undetermined>
+	NOTE: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5842 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 <unfixed>
@@ -1058,7 +1060,9 @@
 CVE-2013-5833
 	RESERVED
 CVE-2013-5832 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
-	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
+	- openjdk-6 <undetermined>
+	- openjdk-7 <undetermined>
+	NOTE: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5831 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
@@ -1146,7 +1150,9 @@
 	- openjdk-6 <unfixed>
 	- openjdk-7 <unfixed>
 CVE-2013-5801 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
-	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
+	- openjdk-6 <undetermined>
+	- openjdk-7 <undetermined>
+	NOTE: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5800 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java ...)
 	- openjdk-6 <not-affected> (Only affects Java 7)
 	- openjdk-7 <unfixed>