Author: jmm
Date: 2017-02-01 23:08:27 +0000 (Wed, 01 Feb 2017)
New Revision: 48656
Modified:
data/CVE/list
Log:
NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-02-01 21:52:34 UTC (rev 48655)
+++ data/CVE/list 2017-02-01 23:08:27 UTC (rev 48656)
@@ -16279,6 +16279,7 @@
RESERVED
CVE-2016-8751
RESERVED
+ NOT-FOR-US: Apache Ranger
CVE-2016-8750
RESERVED
CVE-2016-8749
@@ -16289,6 +16290,7 @@
RESERVED
CVE-2016-8746
RESERVED
+ NOT-FOR-US: Apache Ranger
CVE-2016-8745
RESERVED
{DSA-3755-1 DSA-3754-1 DLA-779-1}
@@ -17439,11 +17441,11 @@
CVE-2016-8476
RESERVED
CVE-2016-8475 (An information disclosure vulnerability in the HTC input driver
could ...)
- TODO: check
+ NOT-FOR-US: HTC driver for Android
CVE-2016-8474 (An information disclosure vulnerability in the
STMicroelectronics ...)
- TODO: check
+ NOT-FOR-US: STMicroelectronics driver for Android
CVE-2016-8473 (An information disclosure vulnerability in the
STMicroelectronics ...)
- TODO: check
+ NOT-FOR-US: STMicroelectronics driver for Android
CVE-2016-8472 (An information disclosure vulnerability in the MediaTek driver
could ...)
NOT-FOR-US: Mediatek driver for Android
CVE-2016-8471 (An information disclosure vulnerability in the MediaTek driver
could ...)
@@ -17451,11 +17453,11 @@
CVE-2016-8470 (An information disclosure vulnerability in the MediaTek driver
could ...)
NOT-FOR-US: Mediatek driver for Android
CVE-2016-8469 (An information disclosure vulnerability in the camera driver
could ...)
- TODO: check
+ NOT-FOR-US: camera driver for Android
CVE-2016-8468 (An elevation of privilege vulnerability in Binder could enable
a local ...)
- TODO: check
+ NOT-FOR-US: Android Binder
CVE-2016-8467 (An elevation of privilege vulnerability in the bootloader could
enable ...)
- TODO: check
+ NOT-FOR-US: Android bootloader
CVE-2016-8466 (An elevation of privilege vulnerability in the Broadcom Wi-Fi
driver ...)
NOT-FOR-US: Broadcom Wi-Fi driver for Android
CVE-2016-8465 (An elevation of privilege vulnerability in the Broadcom Wi-Fi
driver ...)
@@ -17463,11 +17465,11 @@
CVE-2016-8464 (An elevation of privilege vulnerability in the Broadcom Wi-Fi
driver ...)
NOT-FOR-US: Broadcom Wi-Fi driver for Android
CVE-2016-8463 (A denial of service vulnerability in the Qualcomm FUSE file
system ...)
- TODO: check
+ NOT-FOR-US: Qualcomm file system for Android
CVE-2016-8462 (An information disclosure vulnerability in the bootloader could
enable ...)
- TODO: check
+ NOT-FOR-US: Android bootloader
CVE-2016-8461 (An information disclosure vulnerability in the bootloader could
enable ...)
- TODO: check
+ NOT-FOR-US: Android bootloader
CVE-2016-8460 (An information disclosure vulnerability in the NVIDIA video
driver ...)
NOT-FOR-US: Nvidia driver for Android
CVE-2016-8459 (Possible buffer overflow in storage subsystem. Bad parameters
as part ...)
@@ -17567,7 +17569,7 @@
CVE-2016-8412 (An elevation of privilege vulnerability in the Qualcomm camera
could ...)
NOT-FOR-US: Qualcomm component for Android
CVE-2016-8411 (Buffer overflow vulnerability while processing QMI QOS TLVs.
Product: ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2016-8410 (An information disclosure vulnerability in the Qualcomm sound
driver ...)
NOT-FOR-US: Qualcomm driver for Android
CVE-2016-8409 (An information disclosure vulnerability in the NVIDIA video
driver ...)
@@ -22925,7 +22927,7 @@
CVE-2016-6704 (An elevation of privilege vulnerability in Mediaserver in
Android 4.x ...)
NOT-FOR-US: Android Mediaserver
CVE-2016-6703 (A remote code execution vulnerability in an Android runtime
library in ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2016-6702 (A remote code execution vulnerability in libjpeg in Android 4.x
before ...)
TODO: check
CVE-2016-6701 (A remote code execution vulnerability in libskia in Android 7.0
before ...)
@@ -22951,21 +22953,21 @@
CVE-2016-6691 (service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm
Wi-Fi ...)
NOT-FOR-US: Qualcomm driver for Android
CVE-2016-6690 (The sound driver in the kernel in Android before 2016-10-05 on
Nexus ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Sound driver for Android
CVE-2016-6689 (Binder in the kernel in Android before 2016-10-05 on Nexus
devices ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Android Binder
CVE-2016-6688 (The NVIDIA profiler in Android before 2016-10-05 on Nexus 9
devices ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Nvidia driver for Android
CVE-2016-6687 (The NVIDIA profiler in Android before 2016-10-05 on Nexus 9
devices ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Nvidia driver for Android
CVE-2016-6686 (The NVIDIA profiler in Android before 2016-10-05 on Nexus 9
devices ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Nvidia driver for Android
CVE-2016-6685 (The kernel in Android before 2016-10-05 on Nexus 6P devices
allows ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Android kernel for Nexus devices
CVE-2016-6684 (The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X,
Nexus 6, ...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Android kernel for Nexus devices
CVE-2016-6683 (The kernel in Android before 2016-10-05 on Nexus devices allows
...)
- - android <itp> (bug #459219)
+ NOT-FOR-US: Android kernel for Nexus devices
CVE-2016-6682 (drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2
driver ...)
NOT-FOR-US: Qualcomm driver for Android
CVE-2016-6681 (drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2
driver ...)
@@ -23039,7 +23041,7 @@
CVE-2016-6669 (Buffer overflow in the Authentication, Authorization and
Accounting ...)
NOT-FOR-US: Huawei
CVE-2016-6668 (The Atlassian Hipchat Integration Plugin for Bitbucket Server
6.26.0 ...)
- TODO: check
+ NOT-FOR-US: Atlassian Hipchat Integration Plugin for Bitbucket Server
CVE-2016-6667
RESERVED
CVE-2016-6666
@@ -23772,7 +23774,7 @@
CVE-2016-6518 (Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700,
and ...)
NOT-FOR-US: Huawei
CVE-2016-6517 (Directory traversal vulnerability in Liferay 5.1.0 allows
remote ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2016-6515 (The auth_password function in auth-passwd.c in sshd in OpenSSH
before ...)
{DLA-594-1}
- openssh 1:7.3p1-1 (bug #833823)
@@ -23793,7 +23795,7 @@
CVE-2016-6497 (main/java/org/apache/directory/groovyldap/LDAP.java in the
Groovy LDAP ...)
TODO: check
CVE-2016-6496 (The LDAP directory connector in Atlassian Crowd before 2.8.8
and 2.9.x ...)
- TODO: check
+ NOT-FOR-US: Atlassian Crowd
CVE-2016-6525 (Heap-based buffer overflow in the pdf_load_mesh_params function
in ...)
{DSA-3655-1 DLA-589-1}
- mupdf 1.9a+ds1-1.2 (bug #833417)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
