[Secure-testing-commits] r49366 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-02 15:14:19 +0000 (Thu, 02 Mar 2017)
New Revision: 49366

Modified:
   data/CVE/list
Log:
apple status update


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-02 11:28:16 UTC (rev 49365)
+++ data/CVE/list	2017-03-02 15:14:19 UTC (rev 49366)
@@ -32660,7 +32660,7 @@
 CVE-2016-4695
 	RESERVED
 CVE-2016-4694 (The Apache HTTP Server in Apple OS X before 10.12 and OS X Server ...)
-	TODO: check
+	NOT-FOR-US: Apple CVE assignment to the equivalent of CVE-2016-5387
 CVE-2016-4693 (An issue was discovered in certain Apple products. iOS before 10.2 is ...)
 	NOT-FOR-US: Apple
 CVE-2016-4692 (An issue was discovered in certain Apple products. iOS before 10.2 is ...)
@@ -32813,17 +32813,17 @@
 CVE-2016-4620 (The Sandbox Profiles component in Apple iOS before 10 does not ...)
 	NOT-FOR-US: Apple
 CVE-2016-4619 (libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4618 (Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS ...)
 	NOT-FOR-US: Apple
 CVE-2016-4617 (An issue was discovered in certain Apple products. macOS before 10.12 ...)
 	NOT-FOR-US: Apple
 CVE-2016-4616 (libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4615 (libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4614 (libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4613 (An issue was discovered in certain Apple products. Safari before ...)
 	NOT-FOR-US: Apple
 CVE-2016-4612 (libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
@@ -32831,13 +32831,13 @@
 CVE-2016-4611 (WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 ...)
 	NOT-FOR-US: Webkit as used by Apple
 CVE-2016-4610 (libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4609 (libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4608 (libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4607 (libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check
+	TODO: check, contacted Apple for more information
 CVE-2016-4606
 	RESERVED
 CVE-2016-4605 (Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a ...)