[Secure-testing-commits] r48656 - data/CVE

Wed Feb 1 23:08:27 UTC 2017

Author: jmm
Date: 2017-02-01 23:08:27 +0000 (Wed, 01 Feb 2017)
New Revision: 48656

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-02-01 21:52:34 UTC (rev 48655)
+++ data/CVE/list	2017-02-01 23:08:27 UTC (rev 48656)
@@ -16279,6 +16279,7 @@
 	RESERVED
 CVE-2016-8751
 	RESERVED
+	NOT-FOR-US: Apache Ranger
 CVE-2016-8750
 	RESERVED
 CVE-2016-8749
@@ -16289,6 +16290,7 @@
 	RESERVED
 CVE-2016-8746
 	RESERVED
+	NOT-FOR-US: Apache Ranger
 CVE-2016-8745
 	RESERVED
 	{DSA-3755-1 DSA-3754-1 DLA-779-1}
@@ -17439,11 +17441,11 @@
 CVE-2016-8476
 	RESERVED
 CVE-2016-8475 (An information disclosure vulnerability in the HTC input driver could ...)
-	TODO: check
+	NOT-FOR-US: HTC driver for Android
 CVE-2016-8474 (An information disclosure vulnerability in the STMicroelectronics ...)
-	TODO: check
+	NOT-FOR-US: STMicroelectronics driver for Android
 CVE-2016-8473 (An information disclosure vulnerability in the STMicroelectronics ...)
-	TODO: check
+	NOT-FOR-US: STMicroelectronics driver for Android
 CVE-2016-8472 (An information disclosure vulnerability in the MediaTek driver could ...)
 	NOT-FOR-US: Mediatek driver for Android
 CVE-2016-8471 (An information disclosure vulnerability in the MediaTek driver could ...)
@@ -17451,11 +17453,11 @@
 CVE-2016-8470 (An information disclosure vulnerability in the MediaTek driver could ...)
 	NOT-FOR-US: Mediatek driver for Android
 CVE-2016-8469 (An information disclosure vulnerability in the camera driver could ...)
-	TODO: check
+	NOT-FOR-US: camera driver for Android
 CVE-2016-8468 (An elevation of privilege vulnerability in Binder could enable a local ...)
-	TODO: check
+	NOT-FOR-US: Android Binder
 CVE-2016-8467 (An elevation of privilege vulnerability in the bootloader could enable ...)
-	TODO: check
+	NOT-FOR-US: Android bootloader
 CVE-2016-8466 (An elevation of privilege vulnerability in the Broadcom Wi-Fi driver ...)
 	NOT-FOR-US: Broadcom Wi-Fi driver for Android
 CVE-2016-8465 (An elevation of privilege vulnerability in the Broadcom Wi-Fi driver ...)
@@ -17463,11 +17465,11 @@
 CVE-2016-8464 (An elevation of privilege vulnerability in the Broadcom Wi-Fi driver ...)
 	NOT-FOR-US: Broadcom Wi-Fi driver for Android
 CVE-2016-8463 (A denial of service vulnerability in the Qualcomm FUSE file system ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm file system for Android
 CVE-2016-8462 (An information disclosure vulnerability in the bootloader could enable ...)
-	TODO: check
+	NOT-FOR-US: Android bootloader
 CVE-2016-8461 (An information disclosure vulnerability in the bootloader could enable ...)
-	TODO: check
+	NOT-FOR-US: Android bootloader
 CVE-2016-8460 (An information disclosure vulnerability in the NVIDIA video driver ...)
 	NOT-FOR-US: Nvidia driver for Android
 CVE-2016-8459 (Possible buffer overflow in storage subsystem. Bad parameters as part ...)
@@ -17567,7 +17569,7 @@
 CVE-2016-8412 (An elevation of privilege vulnerability in the Qualcomm camera could ...)
 	NOT-FOR-US: Qualcomm component for Android
 CVE-2016-8411 (Buffer overflow vulnerability while processing QMI QOS TLVs. Product: ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2016-8410 (An information disclosure vulnerability in the Qualcomm sound driver ...)
 	NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-8409 (An information disclosure vulnerability in the NVIDIA video driver ...)
@@ -22925,7 +22927,7 @@
 CVE-2016-6704 (An elevation of privilege vulnerability in Mediaserver in Android 4.x ...)
 	NOT-FOR-US: Android Mediaserver
 CVE-2016-6703 (A remote code execution vulnerability in an Android runtime library in ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2016-6702 (A remote code execution vulnerability in libjpeg in Android 4.x before ...)
 	TODO: check
 CVE-2016-6701 (A remote code execution vulnerability in libskia in Android 7.0 before ...)
@@ -22951,21 +22953,21 @@
 CVE-2016-6691 (service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi ...)
 	NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-6690 (The sound driver in the kernel in Android before 2016-10-05 on Nexus ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Sound driver for Android
 CVE-2016-6689 (Binder in the kernel in Android before 2016-10-05 on Nexus devices ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Android Binder
 CVE-2016-6688 (The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Nvidia driver for Android
 CVE-2016-6687 (The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Nvidia driver for Android
 CVE-2016-6686 (The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Nvidia driver for Android
 CVE-2016-6685 (The kernel in Android before 2016-10-05 on Nexus 6P devices allows ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Android kernel for Nexus devices
 CVE-2016-6684 (The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Android kernel for Nexus devices
 CVE-2016-6683 (The kernel in Android before 2016-10-05 on Nexus devices allows ...)
-	- android <itp> (bug #459219)
+	NOT-FOR-US: Android kernel for Nexus devices
 CVE-2016-6682 (drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver ...)
 	NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-6681 (drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver ...)
@@ -23039,7 +23041,7 @@
 CVE-2016-6669 (Buffer overflow in the Authentication, Authorization and Accounting ...)
 	NOT-FOR-US: Huawei
 CVE-2016-6668 (The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 ...)
-	TODO: check
+	NOT-FOR-US: Atlassian Hipchat Integration Plugin for Bitbucket Server
 CVE-2016-6667
 	RESERVED
 CVE-2016-6666
@@ -23772,7 +23774,7 @@
 CVE-2016-6518 (Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and ...)
 	NOT-FOR-US: Huawei
 CVE-2016-6517 (Directory traversal vulnerability in Liferay 5.1.0 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Liferay
 CVE-2016-6515 (The auth_password function in auth-passwd.c in sshd in OpenSSH before ...)
 	{DLA-594-1}
 	- openssh 1:7.3p1-1 (bug #833823)
@@ -23793,7 +23795,7 @@
 CVE-2016-6497 (main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP ...)
 	TODO: check
 CVE-2016-6496 (The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x ...)
-	TODO: check
+	NOT-FOR-US: Atlassian Crowd
 CVE-2016-6525 (Heap-based buffer overflow in the pdf_load_mesh_params function in ...)
 	{DSA-3655-1 DLA-589-1}
 	- mupdf 1.9a+ds1-1.2 (bug #833417)


