[Secure-testing-commits] r52910 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-06-25 21:10:14 +0000 (Sun, 25 Jun 2017)
New Revision: 52910

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-25 20:58:11 UTC (rev 52909)
+++ data/CVE/list	2017-06-25 21:10:14 UTC (rev 52910)
@@ -1,3 +1,25 @@
+CVE-2017-9872 (The III_dequantize_sample function in layer3.c in mpglib, as used in ...)
+	TODO: check
+CVE-2017-9871 (The III_i_stereo function in layer3.c in mpglib, as used in ...)
+	TODO: check
+CVE-2017-9870 (The III_i_stereo function in layer3.c in mpglib, as used in ...)
+	TODO: check
+CVE-2017-9869 (The II_step_one function in layer2.c in mpglib, as used in ...)
+	TODO: check
+CVE-2017-9868 (In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is ...)
+	TODO: check
+CVE-2017-9867
+	RESERVED
+CVE-2017-9866
+	RESERVED
+CVE-2017-9865 (The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 ...)
+	TODO: check
+CVE-2015-9101 (The fill_buffer_resample function in util.c in libmp3lame.a in LAME ...)
+	TODO: check
+CVE-2015-9100 (The fill_buffer_resample function in util.c in libmp3lame.a in LAME ...)
+	TODO: check
+CVE-2015-9099 (The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 ...)
+	TODO: check
 CVE-2017-9864
 	RESERVED
 CVE-2017-9863
@@ -48,8 +70,8 @@
 	RESERVED
 CVE-2017-9841
 	RESERVED
-CVE-2017-9840
-	RESERVED
+CVE-2017-9840 (Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload ...)
+	TODO: check
 CVE-2017-9839
 	RESERVED
 CVE-2017-9838
@@ -3146,7 +3168,7 @@
 	RESERVED
 CVE-2017-9233
 	RESERVED
-	{DLA-990-1}
+	{DSA-3898-1 DLA-990-1}
 	- expat 2.2.1-1
 	NOTE: https://libexpat.github.io/doc/cve-2017-9233/
 	NOTE: https://github.com/libexpat/libexpat/commit/c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f