Author: geissert
Date: 2017-10-24 09:13:30 +0000 (Tue, 24 Oct 2017)
New Revision: 56935

Modified:
   data/CVE/list
Log:
2 apr issues, NFU


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2017-10-24 09:10:14 UTC (rev 56934)
+++ data/CVE/list       2017-10-24 09:13:30 UTC (rev 56935)
@@ -1810,7 +1810,7 @@
 CVE-2017-15082
        RESERVED
 CVE-2017-15081 (In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the 
playlist ...)
-       TODO: check
+       NOT-FOR-US: PHPSUGAR PHP Melody CMS
 CVE-2017-15080
        RESERVED
 CVE-2017-15079 (The Smush Image Compression and Optimization plugin before 
2.7.6 for ...)
@@ -9060,6 +9060,7 @@
 CVE-2017-12619
        RESERVED
 CVE-2017-12618 (Apache Portable Runtime Utility (APR-util) 1.6.0 and prior 
fail to ...)
+       - apr <unfixed>
        TODO: check
 CVE-2017-12617 (When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 
to ...)
        - tomcat9 <itp> (bug #802312)
@@ -9086,6 +9087,7 @@
 CVE-2017-12614
        RESERVED
 CVE-2017-12613 (When apr_exp_time*() or apr_os_exp_time*() functions are 
invoked with ...)
+       - apr <unfixed>
        TODO: check
 CVE-2017-12612 (In Apache Spark 1.6.0 until 2.1.1, the launcher API performs 
unsafe ...)
        NOT-FOR-US: Apache Spark


_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to