[Secure-testing-commits] r49374 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-02 18:21:24 +0000 (Thu, 02 Mar 2017)
New Revision: 49374

Modified:
   data/CVE/list
Log:
"new" kfreebsd issue
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-02 17:51:14 UTC (rev 49373)
+++ data/CVE/list	2017-03-02 18:21:24 UTC (rev 49374)
@@ -41690,9 +41690,9 @@
 CVE-2016-1890
 	RESERVED
 CVE-2016-1889 (Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, ...)
-	TODO: check
+	NOT-FOR-US: bhyve hypervisor for FreeBSD
 CVE-2016-1888 (The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows ...)
-	TODO: check
+	NOT-FOR-US: telnetd in FreeBSD
 CVE-2016-1887 (Integer signedness error in the sockargs function in ...)
 	- kfreebsd-10 10.3~svn300087-1 (unimportant; bug #824605)
 	NOTE: kfreebsd not covered by security support in Jessie
@@ -41707,7 +41707,9 @@
 CVE-2016-1884
 	RESERVED
 CVE-2016-1883 (The issetugid system call in the Linux compatibility layer in FreeBSD ...)
-	TODO: check
+	- kfreebsd-10 10.3~svn300087-1
+	- kfreebsd-9 <removed> (unimportant)
+	NOTE: kfreebsd not covered by security support in Jessie
 CVE-2016-1882 (FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow ...)
 	- kfreebsd-10 10.3~svn296373-1 (unimportant; bug #811280)
 	NOTE: kfreebsd not covered by security support in Jessie