[Secure-testing-commits] r49123 - in data: CVE DLA DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-22 11:07:34 +0000 (Wed, 22 Feb 2017)
New Revision: 49123

Modified:
   data/CVE/list
   data/DLA/list
   data/DSA/list
Log:
one java issue also in openjdk-7
"new" vbox issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-22 10:58:43 UTC (rev 49122)
+++ data/CVE/list	2017-02-22 11:07:34 UTC (rev 49123)
@@ -35222,10 +35222,14 @@
 CVE-2016-3599
 	RESERVED
 CVE-2016-3598 (Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded ...)
+	{DSA-3641-1 DLA-579-1}
 	- openjdk-8 8u102-b14-1
-	TODO: according to Matthias/Tiago as well in OpenJDK7?
+	[experimental] - openjdk-7 7u111-2.6.7-1
+	- openjdk-7 <removed>
 CVE-2016-3597 (Unspecified vulnerability in the Oracle VM VirtualBox component in ...)
-	TODO: check
+	- virtualbox 5.1.4-dfsg-1
+	[jessie] - virtualbox <not-affected> (Only affects 5.x)
+	[wheezy] - virtualbox <not-affected> (Only affects 5.x)
 CVE-2016-3596 (Unspecified vulnerability in the Outside In Technology component in ...)
 	NOT-FOR-US: Oracle
 CVE-2016-3595 (Unspecified vulnerability in the Outside In Technology component in ...)

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-02-22 10:58:43 UTC (rev 49122)
+++ data/DLA/list	2017-02-22 11:07:34 UTC (rev 49123)
@@ -786,7 +786,7 @@
 [01 Aug 2016] DLA-580-1 graphite2 - regression update
 	[wheezy] - graphite2 1.3.6-1~deb7u2
 [31 Jul 2016] DLA-579-1 openjdk-7 - security update
-	{CVE-2016-3458 CVE-2016-3500 CVE-2016-3508 CVE-2016-3550 CVE-2016-3606}
+	{CVE-2016-3458 CVE-2016-3500 CVE-2016-3508 CVE-2016-3550 CVE-2016-3606 CVE-2016-3598}
 	[wheezy] - openjdk-7 7u111-2.6.7-1~deb7u1
 [30 Jul 2016] DLA-578-1 openssh - security update
 	{CVE-2016-6210}

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-02-22 10:58:43 UTC (rev 49122)
+++ data/DSA/list	2017-02-22 11:07:34 UTC (rev 49123)
@@ -462,7 +462,7 @@
 	{CVE-2016-1000212}
 	[jessie] - lighttpd 1.4.35-4+deb8u1
 [04 Aug 2016] DSA-3641-1 openjdk-7 - security update
-	{CVE-2016-3458 CVE-2016-3500 CVE-2016-3508 CVE-2016-3550 CVE-2016-3606}
+	{CVE-2016-3458 CVE-2016-3500 CVE-2016-3508 CVE-2016-3550 CVE-2016-3606 CVE-2016-3598}
 	[jessie] - openjdk-7 7u111-2.6.7-1~deb8u1
 [03 Aug 2016] DSA-3640-1 firefox-esr - security update
 	{CVE-2016-2830 CVE-2016-2836 CVE-2016-2837 CVE-2016-2838 CVE-2016-5252 CVE-2016-5254 CVE-2016-5258 CVE-2016-5259 CVE-2016-5262 CVE-2016-5263 CVE-2016-5264 CVE-2016-5265}