[Secure-testing-commits] r24024 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-10-16 10:41:39 +0000 (Wed, 16 Oct 2013)
New Revision: 24024

Modified:
   data/CVE/list
Log:
initial openjdk triage


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-16 10:14:17 UTC (rev 24023)
+++ data/CVE/list	2013-10-16 10:41:39 UTC (rev 24024)
@@ -423,6 +423,8 @@
 	RESERVED
 CVE-2013-5854
 	RESERVED
+	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
+	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5853
 	RESERVED
 CVE-2013-5852
@@ -439,6 +441,8 @@
 	RESERVED
 CVE-2013-5846
 	RESERVED
+	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
+	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5845
 	RESERVED
 CVE-2013-5844
@@ -447,6 +451,8 @@
 	RESERVED
 CVE-2013-5842
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5841
 	RESERVED
 CVE-2013-5840
@@ -471,8 +477,12 @@
 	RESERVED
 CVE-2013-5830
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5829
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5828
 	RESERVED
 CVE-2013-5827
@@ -483,6 +493,8 @@
 	RESERVED
 CVE-2013-5824
 	RESERVED
+	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
+	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5823
 	RESERVED
 CVE-2013-5822
@@ -497,12 +509,16 @@
 	RESERVED
 CVE-2013-5817
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5816
 	RESERVED
 CVE-2013-5815
 	RESERVED
 CVE-2013-5814
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5813
 	RESERVED
 CVE-2013-5812
@@ -511,8 +527,12 @@
 	RESERVED
 CVE-2013-5810
 	RESERVED
+	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
+	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5809
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5808
 	RESERVED
 CVE-2013-5807
@@ -522,8 +542,12 @@
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
 CVE-2013-5806
 	RESERVED
+	- openjdk-6 <not-affected> (Specific to MacOS X)
+	- openjdk-7 <not-affected> (Specific to MacOS X)
 CVE-2013-5805
 	RESERVED
+	- openjdk-6 <not-affected> (Specific to MacOS X)
+	- openjdk-7 <not-affected> (Specific to MacOS X)
 CVE-2013-5804
 	RESERVED
 CVE-2013-5803
@@ -559,10 +583,16 @@
 	RESERVED
 CVE-2013-5789
 	RESERVED
+	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
+	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5788
 	RESERVED
+	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
+	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5787
 	RESERVED
+	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
+	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5786
 	RESERVED
 	- mysql-5.5 <not-affected> (Only affects Mysql 5.6)
@@ -576,6 +606,8 @@
 	RESERVED
 CVE-2013-5782
 	RESERVED
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
 CVE-2013-5781
 	RESERVED
 CVE-2013-5780
@@ -586,10 +618,14 @@
 	RESERVED
 CVE-2013-5777
 	RESERVED
+	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
+	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5776
 	RESERVED
 CVE-2013-5775
 	RESERVED
+	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
+	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5774
 	RESERVED
 CVE-2013-5773
@@ -17325,6 +17361,8 @@
 	RESERVED
 CVE-2012-5844
 	RESERVED
+	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
+	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2012-5843 (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...)
 	- iceape <not-affected> (Doesn't affect the ESR series, only releases from experimental)
 	- iceweasel <not-affected> (Doesn't affect the ESR series, only releases from experimental)