[Secure-testing-commits] r32302 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-02-18 06:06:00 +0000 (Wed, 18 Feb 2015)
New Revision: 32302

Modified:
   data/CVE/list
Log:
red hat NFUs
efl n/a


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-18 05:54:20 UTC (rev 32301)
+++ data/CVE/list	2015-02-18 06:06:00 UTC (rev 32302)
@@ -124,7 +124,7 @@
 	NOTE: Only exploitable through virusdb updates, which need to be trusted anywaya
 	- knews <not-affected> (Uses system regex code, see #778401)
 	- radare2 <unfixed> (bug #778402)
-	- efl <unfixed> (bug #778414)
+	- efl <not-affected> (Only used when building on Windows, see #778414)
 	- ptlib <unfixed> (unimportant; bug #778404)
 	NOTE: ptlib uses the regex code from glibc, local fallback code not used
 	- alpine <unfixed> (unimportant; bug #778413)
@@ -8735,6 +8735,7 @@
 	RESERVED
 CVE-2014-8114
 	RESERVED
+	NOT-FOR-US: UberFire Framework
 CVE-2014-8113
 	RESERVED
 CVE-2014-8112
@@ -19315,6 +19316,7 @@
 	NOTE: http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/
 CVE-2014-3682
 	RESERVED
+	NOT-FOR-US: jBPM Designer
 CVE-2014-3681 (Cross-site scripting (XSS) vulnerability in CloudBees Jenkins before ...)
 	- jenkins 1.565.3-1 (bug #763899)
 CVE-2014-3680 (CloudBees Jenkins before 1.583 and LTS before 1.565.3 allows remote ...)