[Secure-testing-commits] r49794 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-19 17:06:20 +0000 (Sun, 19 Mar 2017)
New Revision: 49794

Modified:
   data/CVE/list
Log:
android update
remove one resolved TODO


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-19 12:46:46 UTC (rev 49793)
+++ data/CVE/list	2017-03-19 17:06:20 UTC (rev 49794)
@@ -52872,7 +52872,6 @@
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1285326
 	NOTE: https://os-s.net/advisories/OSS-2016-05_aiptek.pdf
 	NOTE: Upstream commit: https://git.kernel.org/linus/8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 (v4.4-rc6)
-	TODO: check other versions
 CVE-2015-7514
 	RESERVED
 	- ironic 1:4.2.2-1 (bug #807269)
@@ -55295,9 +55294,8 @@
 CVE-2015-6620 (libstagefright in Android before 5.1.1 LMY48Z and 6.0 before ...)
 	NOT-FOR-US: libstagefright
 CVE-2015-6619 (The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 ...)
-	TODO: check
+	- linux <not-affected> (Appears to be caused by a flawed backport of O_TMPFILE feature)
 	NOTE: https://android.googlesource.com/device%2Fhtc%2Fflounder-kernel/+/25d3e5d71865a7c0324423fad87aaabb70e82ee4
-	NOTE: Appears to be caused by a flawed backport of O_TMPFILE feature
 CVE-2015-6618 (Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows ...)
 	NOT-FOR-US: Android
 CVE-2015-6617 (Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before ...)