[Secure-testing-commits] r45872 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-02 07:43:56 +0000 (Wed, 02 Nov 2016)
New Revision: 45872

Modified:
   data/CVE/list
Log:
Update references for curl issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-02 07:39:35 UTC (rev 45871)
+++ data/CVE/list	2016-11-02 07:43:56 UTC (rev 45872)
@@ -1371,67 +1371,68 @@
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/9c91ec778104ae3b744b39444d544e82d5ee9ece
 	NOTE: https://curl.haxx.se/docs/adv_20161102K.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8625.patch
 CVE-2016-8624
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/3bb273db7e40ebc284cff45f3ce3f0475c8339c2
 	NOTE: https://curl.haxx.se/docs/adv_20161102J.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8624.patch
 CVE-2016-8623
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/c5be3d7267c725dbd093ff3a883e07ee8cf2a1d5
 	NOTE: https://curl.haxx.se/docs/adv_20161102I.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8623.patch
 CVE-2016-8622
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/53e71e47d6b81650d26ec33a58d0dca24c7ffb2c
 	NOTE: https://curl.haxx.se/docs/adv_20161102H.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8622.patch
 CVE-2016-8621
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/96a80b5a262fb6dd2ddcea7987296f3b9a405618
 	NOTE: https://curl.haxx.se/docs/adv_20161102G.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8621.patch
 CVE-2016-8620
 	RESERVED
 	- curl <unfixed>
+	[wheezy] - curl <not-affected> (Vulnerable code introduced in 7.34.0)
 	NOTE: https://github.com/curl/curl/commit/fbb5f1aa0326d485d5a7ac643b48481897ca667f
 	NOTE: https://curl.haxx.se/docs/adv_20161102F.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8620.patch
 CVE-2016-8619
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/3d6460edeee21d7d790ec570d0887bed1f4366dd
 	NOTE: https://curl.haxx.se/docs/adv_20161102E.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8619.patch
 CVE-2016-8618
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/8732ec40db652c53fa58cd13e2acb8eab6e40874
 	NOTE: https://curl.haxx.se/docs/adv_20161102D.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8618.patch
 CVE-2016-8617
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/efd24d57426bd77c9b5860e6b297904703750412
 	NOTE: https://curl.haxx.se/docs/adv_20161102C.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8617.patch
 CVE-2016-8616
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/b3ee26c5df75d97f6895e6ec4538894ebaf76e48
 	NOTE: https://curl.haxx.se/docs/adv_20161102B.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8616.patch
 CVE-2016-8615
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://github.com/curl/curl/commit/cff89bc088b7884098ea0c5378bbda3d49c437bc
 	NOTE: https://curl.haxx.se/docs/adv_20161102A.html
-	TODO: not finalized yet, cf. https://curl.haxx.se/mail/lib-2016-10/0132.html
+	NOTE: https://curl.haxx.se/CVE-2016-8615.patch
 CVE-2016-8614
 	RESERVED
 	- ansible <unfixed>