[Secure-testing-commits] r50279 - data/CVE

Mon Apr 3 09:47:02 UTC 2017

Author: jmm
Date: 2017-04-03 09:47:02 +0000 (Mon, 03 Apr 2017)
New Revision: 50279

Modified:
   data/CVE/list
Log:
mark apple/webkit issues as NFU as usual


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-04-03 09:42:29 UTC (rev 50278)
+++ data/CVE/list	2017-04-03 09:47:02 UTC (rev 50279)
@@ -13850,7 +13850,7 @@
 CVE-2017-2487 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving FontParser component
 CVE-2017-2486 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2485 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving Security component
 CVE-2017-2484 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
@@ -13860,20 +13860,20 @@
 CVE-2017-2482 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving Kernel component
 CVE-2017-2481 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2480 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2479 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2478 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving Kernel component
 CVE-2017-2477 (An issue was discovered in certain Apple products. macOS before ...)
 	- libxslt <undetermined>
 	NOTE: contacted Apple for more information, but no reply for quite a while
 CVE-2017-2476 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2475 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2474 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving Kernel component
 CVE-2017-2473 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
@@ -13881,31 +13881,31 @@
 CVE-2017-2472 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving Kernel component
 CVE-2017-2471 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2470 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2469 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2468 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2467 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving ImageIO component
 CVE-2017-2466 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2465 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2464 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2463 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2462 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple
 CVE-2017-2461 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving CoreText component
 CVE-2017-2460 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2459 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2458 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple
 CVE-2017-2457 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
@@ -13913,9 +13913,9 @@
 CVE-2017-2456 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple
 CVE-2017-2455 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2454 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2453 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple Safari
 CVE-2017-2452 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
@@ -13929,11 +13929,11 @@
 CVE-2017-2448 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving Keychain component
 CVE-2017-2447 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2446 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2445 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2444 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving CoreGraphics component
 CVE-2017-2443 (An issue was discovered in certain Apple products. macOS before ...)
@@ -13957,10 +13957,9 @@
 CVE-2017-2434 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving HomeKit component
 CVE-2017-2433 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
-	TODO: check, possibly webkit2gtk
+	NOT-FOR-US: Webkit / if anything of this affects Chromium/webkitgtk, the Chrome sec team will know and fix
 CVE-2017-2432 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)
 	NOT-FOR-US: Apple involving ImageIO component
-	TODO: check
 CVE-2017-2431 (An issue was discovered in certain Apple products. macOS before ...)
 	TODO: check
 CVE-2017-2430 (An issue was discovered in certain Apple products. iOS before 10.3 is ...)


