[Secure-testing-commits] r43487 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Jul 26 10:28:57 UTC 2016


Author: jmm
Date: 2016-07-26 10:28:57 +0000 (Tue, 26 Jul 2016)
New Revision: 43487

Modified:
   data/CVE/list
Log:
openjfx fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-26 09:37:55 UTC (rev 43486)
+++ data/CVE/list	2016-07-26 10:28:57 UTC (rev 43487)
@@ -8865,7 +8865,7 @@
 CVE-2016-3499 (Unspecified vulnerability in the Oracle WebLogic Server component in ...)
 	TODO: check
 CVE-2016-3498 (Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows ...)
-	- openjfx <unfixed> (bug #832419)
+	- openjfx 8u102-b14-1 (bug #832419)
 CVE-2016-3497 (Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local ...)
 	TODO: check
 CVE-2016-3496 (Unspecified vulnerability in the Enterprise Manager for Fusion ...)
@@ -21360,7 +21360,7 @@
 CVE-2015-8140 [ntpq vulnerable to replay attacks]
 	RESERVED
 	- ntp 1:4.2.8p7+dfsg-1
-	[jessie] - ntp <no-dsa> (Minor issue)
+	[jessie] - ntp <no-dsa> (Minor issue, no code fix by upstream and mitigation exists)
 	[wheezy] - ntp <no-dsa> (Minor issue)
 	NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit
 	NOTE: http://support.ntp.org/bin/view/Main/NtpBug2947
@@ -21368,7 +21368,7 @@
 CVE-2015-8139 [Origin Leak: ntpq and ntpdc, disclose origin]
 	RESERVED
 	- ntp 1:4.2.8p7+dfsg-1
-	[jessie] - ntp <no-dsa> (Minor issue)
+	[jessie] - ntp <no-dsa> (Minor issue, no code fix by upstream and mitigation exists)
 	[wheezy] - ntp <no-dsa> (Minor issue)
 	NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit
 	NOTE: http://support.ntp.org/bin/view/Main/NtpBug2946
@@ -21923,7 +21923,7 @@
 CVE-2015-7976 [ntpq saveconfig command allows dangerous characters in filenames]
 	RESERVED
 	- ntp 1:4.2.8p7+dfsg-1 (low)
-	[jessie] - ntp <no-dsa> (Minor issue, can be fixed along in a future update)
+	[jessie] - ntp <no-dsa> (Minor issue, mitigation exists)
 	[wheezy] - ntp <no-dsa> (Minor issue, can be fixed along in a future update)
 	NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit
 	NOTE: http://support.ntp.org/bin/view/Main/NtpBug2938




More information about the Secure-testing-commits mailing list