[Secure-testing-commits] r24167 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-10-25 07:31:37 +0000 (Fri, 25 Oct 2013)
New Revision: 24167

Modified:
   data/CVE/list
Log:
CVE-2013-5803, part of external check, update todo

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-25 07:28:37 UTC (rev 24166)
+++ data/CVE/list	2013-10-25 07:31:37 UTC (rev 24167)
@@ -932,7 +932,10 @@
 	- openjdk-7 <unfixed> (unimportant)
 	NOTE: Javadoc comments can contain arbitrary HTML
 CVE-2013-5803 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
-	TODO: This issue was fixed in Oracle Java, but not in OpenJDK. Likely not-affected, but needs further check
+	- openjdk-6 <unfixed>
+	- openjdk-7 <unfixed>
+	NOTE: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/0b84d3b434c2
+	TODO: check (both openjdk-6 and opendjk-7)
 CVE-2013-5802 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 <unfixed>
@@ -984,8 +987,8 @@
 	- openjdk-6 <unfixed>
 	- openjdk-7 <unfixed>
 CVE-2013-5783 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
+	- openjdk-6 <unfixed>
 	- openjdk-7 <unfixed>
-	- openjdk-6 <unfixed>
 	NOTE: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/2790e9ace697
 	TODO: check (both openjdk-6 and openjdk-7)
 CVE-2013-5782 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)