[Secure-testing-commits] r24027 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-10-16 11:25:31 +0000 (Wed, 16 Oct 2013)
New Revision: 24027

Modified:
   data/CVE/list
Log:
finish openjdk triage


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-16 11:16:41 UTC (rev 24026)
+++ data/CVE/list	2013-10-16 11:25:31 UTC (rev 24027)
@@ -457,6 +457,7 @@
 	RESERVED
 CVE-2013-5843
 	RESERVED
+	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5842
 	RESERVED
 	- openjdk-6 <unfixed>
@@ -485,6 +486,7 @@
 	RESERVED
 CVE-2013-5832
 	RESERVED
+	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5831
 	RESERVED
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
@@ -513,6 +515,7 @@
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5823
 	RESERVED
+	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5822
 	RESERVED
 CVE-2013-5821
@@ -579,12 +582,14 @@
 	NOTE: Javadoc comments can contain arbitrary HTML
 CVE-2013-5803
 	RESERVED
+	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5802
 	RESERVED
 	- openjdk-6 <unfixed>
 	- openjdk-7 <unfixed>
 CVE-2013-5801
 	RESERVED
+	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5800
 	RESERVED
 	- openjdk-6 <not-affected> (Only affects Java 7)
@@ -641,6 +646,7 @@
 	- openjdk-7 <unfixed>
 CVE-2013-5783
 	RESERVED
+	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
 CVE-2013-5782
 	RESERVED
 	- openjdk-6 <unfixed>