[Secure-testing-commits] r39160 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-25 15:29:10 +0000 (Mon, 25 Jan 2016)
New Revision: 39160

Modified:
   data/CVE/list
Log:
According to Oracle CPU two CVEs should not affect virtualbox in wheezy and squeeze

Cannot be said for sure, but the advisory say only that versions prior
to 4.3.36, prior to 5.0.14 are afected.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-25 11:21:09 UTC (rev 39159)
+++ data/CVE/list	2016-01-25 15:29:10 UTC (rev 39160)
@@ -4284,6 +4284,8 @@
 	RESERVED
 CVE-2016-0592 (Unspecified vulnerability in the Oracle VM VirtualBox component in ...)
 	- virtualbox 5.0.14-dfsg-1
+	[wheezy] - virtualbox <not-affected> (Only affects 4.3.x and 5.0.x)
+	[squeeze] - virtualbox <not-affected> (Only affects 4.3.x and 5.0.x)
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixOVIR
 CVE-2016-0591 (Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing ...)
 	TODO: check
@@ -4492,6 +4494,8 @@
 	TODO: check
 CVE-2016-0495 (Unspecified vulnerability in the Oracle VM VirtualBox component in ...)
 	- virtualbox 5.0.14-dfsg-1
+	[wheezy] - virtualbox <not-affected> (Only affects 4.3.x and 5.0.x)
+	[squeeze] - virtualbox <not-affected> (Only affects 4.3.x and 5.0.x)
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixOVIR
 CVE-2016-0494 (Unspecified vulnerability in the Java SE and Java SE Embedded ...)
 	- openjdk-8 8u72-b15-1