[Secure-testing-commits] r38672 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-03 18:20:48 +0000 (Sun, 03 Jan 2016)
New Revision: 38672

Modified:
   data/CVE/list
Log:
CVE-2015-2632 should affect icu, fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-03 16:05:20 UTC (rev 38671)
+++ data/CVE/list	2016-01-03 18:20:48 UTC (rev 38672)
@@ -20070,6 +20070,8 @@
 	- openjdk-8 8u66-b01-1
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
 	NOTE: "Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets."
+	- icu 55.1-7
+	NOTE: http://bugs.icu-project.org/trac/ticket/11865 (not yet public)
 CVE-2015-2631 (Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows ...)
 	NOT-FOR-US: Solaris (rmformat)
 CVE-2015-2630 (Unspecified vulnerability in the Technology stack component in Oracle ...)