Author: geissert Date: 2012-08-30 22:44:59 +0000 (Thu, 30 Aug 2012) New Revision: 20060 Modified: data/CVE/list Log: openjdk issues Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-08-30 21:14:18 UTC (rev 20059) +++ data/CVE/list 2012-08-30 22:44:59 UTC (rev 20060) @@ -2,7 +2,7 @@ - juju 0.5.1-2 (bug #685728) CVE-2012-4681 (Oracle Java 7 Update 6, and possibly other versions, allows remote ...) - openjdk-7 <unfixed> - - openjdk-6 <unfixed> + - openjdk-6 <not-affected> CVE-2012-4680 (Directory traversal vulnerability in the XML Server in IOServer before ...) NOT-FOR-US: IOServer CVE-2012-4679 (Cross-site scripting (XSS) vulnerability in admin/login.php in ...) @@ -3702,6 +3702,8 @@ RESERVED CVE-2012-3136 RESERVED + - openjdk-7 <unfixed> + - openjdk-6 <not-affected> CVE-2012-3135 (Unspecified vulnerability in the Oracle JRockit component in Oracle ...) NOT-FOR-US: Oracle Fusion CVE-2012-3134 (Unspecified vulnerability in the Core RDBMS component in Oracle ...) @@ -7260,6 +7262,8 @@ NOT-FOR-US: Solaris CVE-2012-1682 RESERVED + - openjdk-7 <unfixed> + - openjdk-6 <not-affected> CVE-2012-1681 (Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 ...) NOT-FOR-US: Solaris CVE-2012-1680 @@ -10010,6 +10014,9 @@ NOT-FOR-US: Oracle SPARC Enterprise M Series Servers XCP 1110 CVE-2012-0547 RESERVED + - openjdk-7 <unfixed> + - openjdk-6 <unfixed> + TODO: check CVE-2012-0546 (Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking ...) NOT-FOR-US: Oracle Financial Services Software CVE-2012-0545 (Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking ...)