[Secure-testing-commits] r52723 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-20 04:36:18 +0000 (Tue, 20 Jun 2017)
New Revision: 52723

Modified:
   data/CVE/list
Log:
Process NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-20 00:41:14 UTC (rev 52722)
+++ data/CVE/list	2017-06-20 04:36:18 UTC (rev 52723)
@@ -7,19 +7,19 @@
 CVE-2017-9760
 	RESERVED
 CVE-2017-9759 (SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the ...)
-	TODO: check
+	NOT-FOR-US: Zenbership
 CVE-2017-9758
 	RESERVED
 CVE-2017-9757 (IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via ...)
-	TODO: check
+	NOT-FOR-US: IPFire
 CVE-2017-1000375 (NetBSD maps the run-time link-editor ld.so directly below the stack ...)
-	TODO: check
+	NOT-FOR-US: NetBSD
 CVE-2017-1000374 (A flaw exists in NetBSD's implementation of the stack guard page that ...)
-	TODO: check
+	NOT-FOR-US: NetBSD
 CVE-2017-1000373 (The OpenBSD qsort() function is recursive, and not randomized, an ...)
-	TODO: check
+	NOT-FOR-US: OpenBSD
 CVE-2017-1000372 (A flaw exists in OpenBSD's implementation of the stack guard page that ...)
-	TODO: check
+	NOT-FOR-US: OpenBSD
 CVE-2017-1000364 (An issue was discovered in the size of the stack guard page on Linux, ...)
 	{DSA-3886-1}
 	- linux <unfixed>
@@ -167,7 +167,7 @@
 CVE-2017-9731 (In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for ...)
 	NOT-FOR-US: Poky for Yocto Project
 CVE-2017-9730 (SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and ...)
-	TODO: check
+	NOT-FOR-US: nuevoMailer
 CVE-2017-9729 (In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) ...)
 	- uclibc <undetermined>
 	TODO: check and check uclibc-ng
@@ -448,7 +448,7 @@
 	- linux <unfixed>
 	NOTE: https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
 CVE-2017-1000378 (The NetBSD qsort() function is recursive, and not randomized, an ...)
-	TODO: check
+	NOT-FOR-US: NetBSD
 CVE-2017-9605 (The vmw_gb_surface_define_ioctl function (accessible via ...)
 	- linux <unfixed>
 	NOTE: http://www.openwall.com/lists/oss-security/2017/06/13/2
@@ -14819,13 +14819,13 @@
 CVE-2017-4988
 	RESERVED
 CVE-2017-4987 (In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2017-4986 (EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could ...)
 	NOT-FOR-US: EMC
 CVE-2017-4985 (In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2017-4984 (In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2017-4983 (EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before ...)
 	NOT-FOR-US: EMC Data Domain OS
 CVE-2017-4982 (EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and ...)