[Secure-testing-commits] r33725 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Apr 20 18:10:01 UTC 2015 

Author: carnil
Date: 2015-04-20 18:10:01 +0000 (Mon, 20 Apr 2015)
New Revision: 33725

Modified:
   data/CVE/list
Log:
Add Oracle NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-20 18:04:28 UTC (rev 33724)
+++ data/CVE/list	2015-04-20 18:10:01 UTC (rev 33725)
@@ -8705,9 +8705,9 @@
 	- percona-xtradb-cluster-5.5 <undetermined>
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
 CVE-2015-0510 (Unspecified vulnerability in the Oracle Commerce Platform component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0509 (Unspecified vulnerability in the Oracle Hyperion BI+ component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0508 (Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier ...)
 	- mysql-5.5 <not-affected> (Only affects 5.6)
 	- mariadb-10.0 <undetermined>
@@ -8731,14 +8731,14 @@
 	- percona-xtradb-cluster-5.5 <undetermined>
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
 CVE-2015-0504 (Unspecified vulnerability in the Oracle Application Object Library ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0503 (Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier ...)
 	- mysql-5.5 <not-affected> (Only affects 5.6)
 	- mariadb-10.0 <undetermined>
 	- percona-xtradb-cluster-5.5 <undetermined>
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
 CVE-2015-0502 (Unspecified vulnerability in the Siebel UI Framework component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0501 (Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, ...)
 	{DSA-3229-1}
 	- mysql-5.5 <unfixed> (bug #782645)
@@ -8764,15 +8764,15 @@
 	- percona-xtradb-cluster-5.5 <undetermined>
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
 CVE-2015-0497 (Unspecified vulnerability in the PeopleSoft Enterprise Portal ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0496 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0495 (Unspecified vulnerability in the Oracle Commerce Guided Search / ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0494 (Unspecified vulnerability in the Oracle Retail Central Office ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0493 (Unspecified vulnerability in the Oracle Outside In Technology ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0492 (Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX ...)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-8 <not-affected> (JavaFX not part of OpenJDK)
@@ -8782,27 +8782,27 @@
 	- openjdk-8 <not-affected> (Specific to Oracle Java, not present in IcedTea)
 	NOTE: Due to the vague disclosure policy by Oracle the exact nature is unknown
 CVE-2015-0490 (Unspecified vulnerability in the Oracle Agile Engineering Data ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0489 (Unspecified vulnerability in the Application Management Pack for ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0488 (Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and ...)
 	- openjdk-6 6b35-1.13.7-1
 	- openjdk-7 7u79-2.5.5-1
 	- openjdk-8 8u45-b14-1
 	NOTE: http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/04cda5b7a3c1
 CVE-2015-0487 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0486 (Unspecified vulnerability in Oracle Java SE 8u40 allows remote ...)
 	- openjdk-8 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2015-0485 (Unspecified vulnerability in the PeopleSoft Enterprise SCM Strategic ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0484 (Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX ...)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-8 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2015-0483 (Unspecified vulnerability in the Core RDBMS component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0482 (Unspecified vulnerability in the Oracle WebLogic Server component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0481
 	RESERVED
 CVE-2015-0480 (Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and ...)
@@ -8811,7 +8811,7 @@
 	- openjdk-6 6b35-1.13.7-1
 	NOTE: http://www.openwall.com/lists/oss-security/2015/01/16/2
 CVE-2015-0479 (Unspecified vulnerability in the XDK and XDB - XML Database component ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0478 (Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and ...)
 	- openjdk-6 6b35-1.13.7-1
 	- openjdk-7 7u79-2.5.5-1
@@ -8821,17 +8821,17 @@
 	- openjdk-7 7u79-2.5.5-1
 	- openjdk-8 8u45-b14-1
 CVE-2015-0476 (Unspecified vulnerability in the SQL Trace Analyzer component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0475 (Unspecified vulnerability in the JD Edwards EnterpriseOne Technology ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0474 (Unspecified vulnerability in the Oracle Outside In Technology ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0473 (Unspecified vulnerability in the Enterprise Manager Base Platform ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0472 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0471 (Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0470 (Unspecified vulnerability in Oracle Java SE 8u40 allows remote ...)
 	- openjdk-6 6b35-1.13.7-1
 	- openjdk-7 7u79-2.5.5-1
@@ -8845,17 +8845,17 @@
 CVE-2015-0467
 	RESERVED
 CVE-2015-0466 (Unspecified vulnerability in the Oracle Retail Back Office component ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0465 (Unspecified vulnerability in the Oracle Transportation Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0464 (Unspecified vulnerability in the Oracle Transportation Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0463 (Unspecified vulnerability in the Oracle Transportation Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0462 (Unspecified vulnerability in the Oracle Transportation Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0461 (Unspecified vulnerability in the Oracle Access Manager component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0460 (Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and ...)
 	- openjdk-6 6b35-1.13.7-1
 	- openjdk-7 7u79-2.5.5-1
@@ -8870,27 +8870,27 @@
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-8 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2015-0457 (Unspecified vulnerability in the Java VM component in Oracle Database ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0456 (Unspecified vulnerability in the Oracle WebCenter Portal component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0455 (Unspecified vulnerability in the XDB - XML Database component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0454
 	RESERVED
 CVE-2015-0453 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0452 (Unspecified vulnerability in the Oracle VM Server for SPARC component ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0451 (Unspecified vulnerability in the Oracle OpenSSO component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0450 (Unspecified vulnerability in the Oracle WebCenter Portal component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0449 (Unspecified vulnerability in the Oracle WebLogic Server component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0448 (Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0447 (Unspecified vulnerability in the Oracle Applications Technology Stack ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0446
 	RESERVED
 CVE-2015-0445
@@ -8908,7 +8908,7 @@
 	- percona-xtradb-cluster-5.5 <undetermined>
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
 CVE-2015-0440 (Unspecified vulnerability in the Oracle Knowledge component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2015-0439 (Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier ...)
 	- mysql-5.5 <not-affected> (Only affects 5.6)
 	- mariadb-10.0 <undetermined>

More information about the Secure-testing-commits mailing list