[Secure-testing-commits] r23557 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-09-05 11:20:16 +0000 (Thu, 05 Sep 2013)
New Revision: 23557

Modified:
   data/CVE/list
Log:
RH NFUs (concludes external check)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-09-05 08:06:26 UTC (rev 23556)
+++ data/CVE/list	2013-09-05 11:20:16 UTC (rev 23557)
@@ -3423,6 +3423,7 @@
 	NOTE: Debian package applied already the more complete fix, see #659899
 CVE-2013-4157
 	RESERVED
+	NOT-FOR-US: Red Hat Storage Server
 CVE-2013-4156 (Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to ...)
 	- libreoffice 1:4.1.0-1 (unimportant)
 	- openoffice.org <removed> (unimportant)
@@ -8718,6 +8719,7 @@
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=964299
 CVE-2013-2068
 	RESERVED
+	NOT-FOR-US: RedHat CloudForms Management Engine
 CVE-2013-2067 (java/org/apache/catalina/authenticator/FormAuthenticator.java in the ...)
 	{DSA-2725-1}
 	- tomcat7 7.0.33
@@ -9228,6 +9230,7 @@
 	- xen-qemu-dm-4.0 <not-affected> (qemu-nbd not installed by the binary package)
 CVE-2013-1921
 	RESERVED
+	NOTE: Red Hat JBoss Enterprise Application Platform (Debian's jboss only provides some classes)
 CVE-2013-1920 (Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under ...)
 	- xen <not-affected> (XSM not enabled in build)
 	NOTE: Debian package not build with XSM_ENABLE, thus resulted binary packages not affected