[Secure-testing-commits] r48637 - in data: . CVE

[Balint Reczey]

Author: rbalint
Date: 2017-01-31 23:19:41 +0000 (Tue, 31 Jan 2017)
New Revision: 48637

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
mysql-connector-python in not affected by CVE-2016-5598 in wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-31 22:25:11 UTC (rev 48636)
+++ data/CVE/list	2017-01-31 23:19:41 UTC (rev 48637)
@@ -26882,6 +26882,7 @@
 	NOT-FOR-US: Oracle
 CVE-2016-5598 (Unspecified vulnerability in the MySQL Connector component 2.1.3 and ...)
 	- mysql-connector-python 2.1.5-1 (bug #841677)
+	[wheezy] - mysql-connector-python <not-affected> (Only the Python 3 code is affected which is not shipped in binary package)
 	NOTE: https://blog.qualys.com/laws-of-vulnerabilities/2016/10/18/oracle-october-2016-critical-patch-update
 CVE-2016-5597 (Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and ...)
 	{DSA-3707-1 DLA-704-1}

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-01-31 22:25:11 UTC (rev 48636)
+++ data/dla-needed.txt	2017-01-31 23:19:41 UTC (rev 48637)
@@ -69,9 +69,6 @@
 --
 mysql-5.5 (Balint Reczey)
 --
-mysql-connector-python (Balint Reczey)
-  NOTE: see http://bugs.debian.org/841677 for current discussion
---
 openjdk-7 (Emilio Pozuelo)
 --
 openssl (Emilio Pozuelo)