[Secure-testing-commits] r56801 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-18 07:34:05 +0000 (Wed, 18 Oct 2017)
New Revision: 56801

Modified:
   data/CVE/list
Log:
new Java issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-18 06:11:52 UTC (rev 56800)
+++ data/CVE/list	2017-10-18 07:34:05 UTC (rev 56801)
@@ -14993,10 +14993,16 @@
 	RESERVED
 CVE-2017-10388
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10387
 	RESERVED
 CVE-2017-10386
 	RESERVED
+	NOT-FOR-US: Java Advanced Management Console
 CVE-2017-10385
 	RESERVED
 CVE-2017-10384
@@ -15012,6 +15018,7 @@
 	RESERVED
 CVE-2017-10380
 	RESERVED
+	NOT-FOR-US: Java Advanced Management Console
 CVE-2017-10379
 	RESERVED
 	- mysql-5.7 <unfixed> (bug #878398)
@@ -15067,10 +15074,25 @@
 	RESERVED
 CVE-2017-10357
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10356
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10355
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10354
 	RESERVED
 CVE-2017-10353
@@ -15081,24 +15103,54 @@
 	RESERVED
 CVE-2017-10350
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
 CVE-2017-10349
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10348
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10347
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10346
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10345
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10344
 	RESERVED
 CVE-2017-10343
 	RESERVED
 CVE-2017-10342
 	RESERVED
+	NOT-FOR-US: Java Advanced Management Console
 CVE-2017-10341
 	RESERVED
+	NOT-FOR-US: Java Advanced Management Console
 CVE-2017-10340
 	RESERVED
 CVE-2017-10339
@@ -15175,6 +15227,8 @@
 	RESERVED
 CVE-2017-10309
 	RESERVED
+	- openjdk-9 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
+	- openjdk-8 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2017-10308
 	RESERVED
 CVE-2017-10307
@@ -15206,6 +15260,11 @@
 	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10295
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10294
 	RESERVED
 	- mysql-5.7 <unfixed> (bug #878398)
@@ -15213,6 +15272,7 @@
 	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10293
 	RESERVED
+	TODO: probably specific to Oracle Java
 CVE-2017-10292
 	RESERVED
 CVE-2017-10291
@@ -15232,6 +15292,11 @@
 	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10285
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10284
 	RESERVED
 	- mysql-5.7 <unfixed> (bug #878398)
@@ -15246,6 +15311,11 @@
 	RESERVED
 CVE-2017-10281
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10280
 	RESERVED
 CVE-2017-10279
@@ -15266,6 +15336,11 @@
 	RESERVED
 CVE-2017-10274
 	RESERVED
+	- openjdk-9 <unfixed>
+	- openjdk-8 <unfixed>
+	- openjdk-7 <removed>
+	- openjdk-6 <removed>
+	[wheezy] - openjdk-6 <end-of-life>
 CVE-2017-10273
 	RESERVED
 CVE-2017-10272