[Secure-testing-commits] r37674 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-11-12 21:10:12 +0000 (Thu, 12 Nov 2015)
New Revision: 37674

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-11-12 20:20:14 UTC (rev 37673)
+++ data/CVE/list	2015-11-12 21:10:12 UTC (rev 37674)
@@ -1,3 +1,39 @@
+CVE-2015-8123
+	RESERVED
+CVE-2015-8122
+	RESERVED
+CVE-2015-8121
+	RESERVED
+CVE-2015-8120
+	RESERVED
+CVE-2015-8119
+	RESERVED
+CVE-2015-8118
+	RESERVED
+CVE-2015-8117
+	RESERVED
+CVE-2015-8116
+	RESERVED
+CVE-2015-8115
+	RESERVED
+CVE-2015-8114
+	RESERVED
+CVE-2015-8113 (Untrusted search path vulnerability in the client in Symantec Endpoint ...)
+	TODO: check
+CVE-2015-8112
+	RESERVED
+CVE-2015-8111
+	RESERVED
+CVE-2015-8110
+	RESERVED
+CVE-2015-8109
+	RESERVED
+CVE-2015-8108
+	RESERVED
+CVE-2015-8107
+	RESERVED
+CVE-2015-8106
+	RESERVED
 CVE-2015-XXXX [libpng buffer overflow in png_set_PLTE]
 	- libpng <unfixed>
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/11/12/2
@@ -820,14 +856,14 @@
 	TODO: check
 CVE-2015-7821
 	RESERVED
-CVE-2015-7820
-	RESERVED
-CVE-2015-7819
-	RESERVED
-CVE-2015-7818
-	RESERVED
-CVE-2015-7817
-	RESERVED
+CVE-2015-7820 (Race condition in the administration-panel web service in IBM System ...)
+	TODO: check
+CVE-2015-7819 (The DB service in IBM System Networking Switch Center (SNSC) before ...)
+	TODO: check
+CVE-2015-7818 (The administration-panel web service in IBM System Networking Switch ...)
+	TODO: check
+CVE-2015-7817 (Race condition in the administration-panel web service in IBM System ...)
+	TODO: check
 CVE-2015-7816
 	RESERVED
 CVE-2015-7815
@@ -3976,10 +4012,10 @@
 	NOT-FOR-US: IBM
 CVE-2015-6556
 	RESERVED
-CVE-2015-6555
-	RESERVED
-CVE-2015-6554
-	RESERVED
+CVE-2015-6555 (Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 ...)
+	TODO: check
+CVE-2015-6554 (Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 ...)
+	TODO: check
 CVE-2015-6553
 	RESERVED
 CVE-2015-6552
@@ -4435,8 +4471,8 @@
 	RESERVED
 CVE-2015-6364
 	RESERVED
-CVE-2015-6363
-	RESERVED
+CVE-2015-6363 (Multiple cross-site scripting (XSS) vulnerabilities in the web ...)
+	TODO: check
 CVE-2015-6362 (The web GUI in Cisco Connected Grid Network Management System (CG-NMS) ...)
 	TODO: check
 CVE-2015-6361
@@ -6781,8 +6817,7 @@
 	NOT-FOR-US: HP
 CVE-2015-5442 (Unspecified vulnerability in HP Software Update before 5.005.002.002 ...)
 	NOT-FOR-US: HP Software Update
-CVE-2015-5441
-	RESERVED
+CVE-2015-5441 (Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight ...)
 	NOT-FOR-US: HP Arcsight
 CVE-2015-5440 (HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before ...)
 	NOT-FOR-US: HP UCMDB
@@ -14976,7 +15011,7 @@
 	NOTE: Upstream ticket: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8273
 	NOTE: https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd
 CVE-2015-2697 (The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT ...)
-	{DSA-3395-1 DLA-340-1}
+	{DSA-3395-2 DSA-3395-1 DLA-340-1}
 	- krb5 1.13.2+dfsg-3 (bug #803088)
 	NOTE: https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789
 	NOTE: Upstream ticket: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8252