[Secure-testing-commits] r48840 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-02-10 21:10:10 +0000 (Fri, 10 Feb 2017)
New Revision: 48840

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-10 21:00:38 UTC (rev 48839)
+++ data/CVE/list	2017-02-10 21:10:10 UTC (rev 48840)
@@ -1,7 +1,17 @@
+CVE-2017-5959
+	RESERVED
+CVE-2017-5958
+	RESERVED
+CVE-2017-5957
+	RESERVED
+CVE-2017-5956
+	RESERVED
+CVE-2017-5955
+	RESERVED
 CVE-2017-5954 (An issue was discovered in the serialize-to-js package 0.5.0 for ...)
 	NOT-FOR-US: serialize-to-js Node package
 CVE-2017-5953 (vim before patch 8.0.0322 does not properly validate values for tree ...)
-	 - vim <unfixed>
+	- vim <unfixed>
 CVE-2017-5952
 	RESERVED
 CVE-2017-5951
@@ -17253,19 +17263,19 @@
 	RESERVED
 CVE-2016-8714
 	RESERVED
-CVE-2016-8713
-	RESERVED
+CVE-2016-8713 (A remote out of bound write / memory corruption vulnerability exists ...)
+	TODO: check
 CVE-2016-8712
 	RESERVED
-CVE-2016-8711
-	RESERVED
+CVE-2016-8711 (A potential remote code execution vulnerability exists in the PDF ...)
+	TODO: check
 CVE-2016-8710 (An exploitable heap write out of bounds vulnerability exists in the ...)
 	- ffmpeg <undetermined>
 	NOTE: The libbpg library is not packaged in Debian but seem embedded in ffmpeg
 	NOTE: http://blog.talosintel.com/2017/01/vulnerability-spotlight-libbpg-image.html
 	NOTE: http://www.talosintelligence.com/reports/TALOS-2016-0223/
-CVE-2016-8709
-	RESERVED
+CVE-2016-8709 (A remote out of bound write / memory corruption vulnerability exists ...)
+	TODO: check
 CVE-2016-8708
 	REJECTED
 CVE-2016-8707 (An exploitable out of bounds write exists in the handling of ...)