Author: jmm Date: 2011-12-02 06:54:18 +0000 (Fri, 02 Dec 2011) New Revision: 17732 Modified: data/CVE/list Log: - mojarra fixed - drop unfixed annotation for lenny, all older suites are implicitly unfixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-12-01 21:14:25 UTC (rev 17731) +++ data/CVE/list 2011-12-02 06:54:18 UTC (rev 17732) @@ -689,7 +689,7 @@ NOT-FOR-US: Apache MyFaces CVE-2011-4358 [Mojarra - includeViewParameters re-evaluates param/model values as EL expressions] RESERVED - - mojarra <unfixed> (bug #650430) + - mojarra 2.0.3-2 (bug #650430) CVE-2011-4357 [clearsilver format string issue] RESERVED {DSA-2355-1} @@ -703,8 +703,7 @@ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=703238 CVE-2011-4354 [OpenSSL 0.9.8g (32-bit builds) bug leaks ECC private keys] RESERVED - - openssl 0.9.8o-4squeeze3 - [lenny] - openssl <unfixed> (bug #650621) + - openssl 0.9.8o-4squeeze3 (bug #650621) CVE-2011-4353 [VP5/VP6 DoS] RESERVED - libav <unfixed>