[Secure-testing-commits] r39637 - data/CVE

[security tracker role]

Author: sectracker
Date: 2016-02-12 21:10:13 +0000 (Fri, 12 Feb 2016)
New Revision: 39637

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-12 20:53:58 UTC (rev 39636)
+++ data/CVE/list	2016-02-12 21:10:13 UTC (rev 39637)
@@ -1,7 +1,39 @@
+CVE-2016-2330 (libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a ...)
+	TODO: check
+CVE-2016-2329 (libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate ...)
+	TODO: check
+CVE-2016-2328 (libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate ...)
+	TODO: check
+CVE-2016-2327 (libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes ...)
+	TODO: check
+CVE-2016-2326 (Integer overflow in the asf_write_packet function in ...)
+	TODO: check
+CVE-2016-2325
+	RESERVED
+CVE-2016-2324
+	RESERVED
+CVE-2016-2323
+	RESERVED
+CVE-2016-2322
+	RESERVED
+CVE-2016-2321
+	RESERVED
+CVE-2016-2320
+	RESERVED
+CVE-2016-2319
+	RESERVED
+CVE-2016-2316
+	RESERVED
+CVE-2016-2315
+	RESERVED
+CVE-2016-2314
+	RESERVED
 CVE-2016-2318
+	RESERVED
 	- graphicsmagick <unfixed>
 	TODO: check other versions (newest 1.3.23 is according to reporter)
 CVE-2016-2317
+	RESERVED
 	- graphicsmagick <unfixed>
 	TODO: check other versions (newest 1.3.23 is according to reporter)
 CVE-2016-2311
@@ -143,6 +175,7 @@
 CVE-2016-2243
 	RESERVED
 CVE-2015-8812 [Flaw in CXGB3 driver]
+	RESERVED
 	- linux <unfixed>
 	- linux-2.6 <removed>
 	NOTE: http://www.openwall.com/lists/oss-security/2016/02/11/1
@@ -1072,8 +1105,8 @@
 	RESERVED
 CVE-2016-1987
 	RESERVED
-CVE-2016-1986
-	RESERVED
+CVE-2016-1986 (HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers ...)
+	TODO: check
 CVE-2016-1985 (HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers ...)
 	NOT-FOR-US: HPE Operations Manager
 CVE-2016-1984 (The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices ...)
@@ -2181,6 +2214,7 @@
 	NOTE: http://xenbits.xen.org/xsa/advisory-167.html
 	TODO: check
 CVE-2016-1567 (chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer ...)
+	{DLA-414-1}
 	- chrony <unfixed> (low; bug #812923)
 	[jessie] - chrony <no-dsa> (Minor issue)
 	[wheezy] - chrony <no-dsa> (Minor issue)
@@ -2793,16 +2827,16 @@
 	RESERVED
 CVE-2016-1325
 	RESERVED
-CVE-2016-1324
-	RESERVED
-CVE-2016-1323
-	RESERVED
-CVE-2016-1322
-	RESERVED
+CVE-2016-1324 (The REST interface in Cisco Spark 2015-06 allows remote attackers to ...)
+	TODO: check
+CVE-2016-1323 (The REST interface in Cisco Spark 2015-06 allows remote authenticated ...)
+	TODO: check
+CVE-2016-1322 (The REST interface in Cisco Spark 2015-07-04 allows remote attackers ...)
+	TODO: check
 CVE-2016-1321
 	RESERVED
-CVE-2016-1320
-	RESERVED
+CVE-2016-1320 (The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users ...)
+	TODO: check
 CVE-2016-1319 (Cisco Unified Communications Manager (aka CallManager) ...)
 	TODO: check
 CVE-2016-1318 (Cross-site scripting (XSS) vulnerability in Cisco Application Policy ...)
@@ -2811,8 +2845,8 @@
 	TODO: check
 CVE-2016-1316 (Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, ...)
 	TODO: check
-CVE-2016-1315
-	RESERVED
+CVE-2016-1315 (The proxy engine in Cisco Advanced Malware Protection (AMP), when used ...)
+	TODO: check
 CVE-2016-1314
 	RESERVED
 CVE-2016-1313
@@ -2867,8 +2901,7 @@
 	RESERVED
 CVE-2016-1288
 	RESERVED
-CVE-2016-1287
-	RESERVED
+CVE-2016-1287 (Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA ...)
 	NOT-FOR-US: Cisco ASA
 CVE-2016-1286
 	RESERVED
@@ -4413,10 +4446,10 @@
 	RESERVED
 CVE-2016-0883
 	RESERVED
-CVE-2016-0882
-	RESERVED
-CVE-2016-0881
-	RESERVED
+CVE-2016-0882 (EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows ...)
+	TODO: check
+CVE-2016-0881 (EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows ...)
+	TODO: check
 CVE-2015-8610
 	RESERVED
 CVE-2015-8609
@@ -9896,6 +9929,7 @@
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2015-11/msg06341.html
 CVE-2015-7511
 	RESERVED
+	{DSA-3474-1}
 	- libgcrypt20 1.6.5-2
 	- libgcrypt11 <removed>
 	NOTE: http://www.cs.tau.ac.IL/~tromer/ecdh/