[Secure-testing-commits] r53382 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2017-07-11 13:37:38 +0000 (Tue, 11 Jul 2017)
New Revision: 53382

Modified:
   data/CVE/list
Log:
CVE-2017-9791 does not affect 1.x version in wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-11 13:21:51 UTC (rev 53381)
+++ data/CVE/list	2017-07-11 13:37:38 UTC (rev 53382)
@@ -2011,6 +2011,8 @@
 	RESERVED
 CVE-2017-9791 (The Struts 1 plugin in Apache Struts 2.3.x might allow remote code ...)
 	- libstruts1.2-java <removed>
+	[wheezy] - libstruts1.2-java <not-affected> (Vulnerable code not present)
+	NOTE: Issue is specific to Struts 2.x.
 CVE-2017-9790
 	RESERVED
 CVE-2017-9789