[Secure-testing-commits] r46388 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-21 18:26:23 +0000 (Mon, 21 Nov 2016)
New Revision: 46388

Modified:
   data/CVE/list
Log:
Add note for jessie entries

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-21 18:21:54 UTC (rev 46387)
+++ data/CVE/list	2016-11-21 18:26:23 UTC (rev 46388)
@@ -1,8 +1,10 @@
 CVE-2016-XXXX [TOCTOU race condition in initscript on chown'ing JVM_TMP temporary directory]
 	- tomcat8 8.0.38-1 (bug #840685)
 	[jessie] - tomcat8 8.0.14-1+deb8u4
+	NOTE: Workaround entry for DSA-3720-1 since no CVE assinged
 	- tomcat7 7.0.72-3 (bug #841655)
 	[jessie] - tomcat7 7.0.56-3+deb8u5
+	NOTE: Workaround entry for DSA-3721-1 since no CVE assinged
 	NOTE: Since 7.0.72-3, src:tomcat7 only builds the Servlet API
 	- tomcat6 6.0.41-3
 	NOTE: Since 6.0.41-3, src:tomcat6 only builds a servlet and docs in Jessie