[Secure-testing-commits] r25737 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-02-14 07:07:13 +0000 (Fri, 14 Feb 2014)
New Revision: 25737

Modified:
   data/CVE/list
Log:
Add CVE-2013-5855/mojarra from external check

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-14 07:04:25 UTC (rev 25736)
+++ data/CVE/list	2014-02-14 07:07:13 UTC (rev 25737)
@@ -7677,6 +7677,10 @@
 	NOT-FOR-US: Oracle Industry Applications
 CVE-2013-5855
 	RESERVED
+	- mojarra <unfixed>
+	NOTE: https://java.net/jira/browse/JAVASERVERFACES-3150
+	NOTE: https://java.net/projects/mojarra/sources/svn/revision/12793
+	TODO: check
 CVE-2013-5854 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier and ...)
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)