[Secure-testing-commits] r41532 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2016-05-07 22:07:39 +0000 (Sat, 07 May 2016)
New Revision: 41532

Modified:
   data/CVE/list
Log:
jackson-dataformat-xml and openjfx fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-07 21:53:59 UTC (rev 41531)
+++ data/CVE/list	2016-05-07 22:07:39 UTC (rev 41532)
@@ -2330,7 +2330,7 @@
 	RESERVED
 CVE-2016-3720 [XmlMapper is vulnerable to XXE attack]
 	RESERVED
-	- jackson-dataformat-xml <unfixed> (bug #823703)
+	- jackson-dataformat-xml 2.7.4-1 (bug #823703)
 	NOTE: https://github.com/FasterXML/jackson-dataformat-xml/commit/f0f19a4c924d9db9a1e2830434061c8640092cc0 (2.7.4)
 CVE-2016-3719
 	RESERVED
@@ -24202,7 +24202,7 @@
 CVE-2015-4917 (Unspecified vulnerability in the Oracle Agile PLM component in Oracle ...)
 	TODO: check
 CVE-2015-4916 (Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 ...)
-	- openjfx <unfixed> (bug #823622)
+	- openjfx 8u91-b14-1 (bug #823622)
 CVE-2015-4915 (Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) ...)
 	TODO: check
 CVE-2015-4914 (Unspecified vulnerability in the Oracle HTTP Server component in ...)
@@ -24227,11 +24227,11 @@
 CVE-2015-4909 (Unspecified vulnerability in the Oracle JDeveloper component in Oracle ...)
 	TODO: check
 CVE-2015-4908 (Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 ...)
-	- openjfx <unfixed> (bug #823622)
+	- openjfx 8u91-b14-1 (bug #823622)
 CVE-2015-4907 (Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local ...)
 	NOT-FOR-US: Oracle Sun Solaris
 CVE-2015-4906 (Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 ...)
-	- openjfx <unfixed> (bug #823622)
+	- openjfx 8u91-b14-1 (bug #823622)
 CVE-2015-4905 (Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier ...)
 	- mysql-5.6 5.6.25-2
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.6)
@@ -24249,7 +24249,7 @@
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-8 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2015-4901 (Unspecified vulnerability in Oracle Java SE 8u60 allows remote ...)
-	- openjfx <unfixed> (bug #823622)
+	- openjfx 8u91-b14-1 (bug #823622)
 CVE-2015-4900 (Unspecified vulnerability in the XDB - XML Database component in ...)
 	TODO: check
 CVE-2015-4899 (Unspecified vulnerability in the Oracle GlassFish Server component in ...)