[Secure-testing-commits] r43858 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-08-07 19:46:20 +0000 (Sun, 07 Aug 2016)
New Revision: 43858

Modified:
   data/CVE/list
Log:
Mark CVE-2015-879{5,6,7}/lucene-solr as n/a

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-08-07 19:34:42 UTC (rev 43857)
+++ data/CVE/list	2016-08-07 19:46:20 UTC (rev 43858)
@@ -14465,17 +14465,14 @@
 	NOTE: https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html
 	NOTE: https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d
 CVE-2015-8797 (Cross-site scripting (XSS) vulnerability in ...)
-	- lucene-solr <undetermined>
+	- lucene-solr <not-affected> (Vulnerable code not present)
 	NOTE: https://issues.apache.org/jira/browse/SOLR-7949
-	TODO: check
 CVE-2015-8796 (Cross-site scripting (XSS) vulnerability in ...)
-	- lucene-solr <undetermined>
+	- lucene-solr <not-affected> (Vulnerable code not present)
 	NOTE: https://issues.apache.org/jira/browse/SOLR-7920
-	TODO: check
 CVE-2015-8795 (Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in ...)
-	- lucene-solr <undetermined>
+	- lucene-solr <not-affected> (Vulnerable code not present)
 	NOTE: https://issues.apache.org/jira/browse/SOLR-7346
-	TODO: check
 CVE-2015-8794 (Absolute path traversal vulnerability in ...)
 	- roundcube 1.1.2+dfsg.1-1
 	[wheezy] - roundcube <not-affected> (Vulnerable code not present)