[Secure-testing-commits] r49821 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-19 21:26:48 +0000 (Sun, 19 Mar 2017)
New Revision: 49821

Modified:
   data/CVE/list
Log:
one more apple undetermined
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-19 21:24:40 UTC (rev 49820)
+++ data/CVE/list	2017-03-19 21:26:48 UTC (rev 49821)
@@ -34785,7 +34785,8 @@
 CVE-2016-4620 (The Sandbox Profiles component in Apple iOS before 10 does not ...)
 	NOT-FOR-US: Apple
 CVE-2016-4619 (libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before ...)
-	TODO: check, contacted Apple for more information
+	- libxml2 <undetermined>
+	NOTE: contacted Apple for more information, but no reply for quite a while
 CVE-2016-4618 (Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS ...)
 	NOT-FOR-US: Apple
 CVE-2016-4617 (An issue was discovered in certain Apple products. macOS before 10.12 ...)
@@ -37055,7 +37056,7 @@
 CVE-2016-3913 (media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in ...)
 	NOT-FOR-US: Android
 CVE-2016-3912 (The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2016-3911 (core/java/android/os/Process.java in Zygote in Android 4.x before ...)
 	NOT-FOR-US: Android
 CVE-2016-3910 (services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in ...)
@@ -89500,7 +89501,7 @@
 CVE-2014-3927
 	RESERVED
 CVE-2014-3926 (Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 ...)
-	TODO: check
+	NOT-FOR-US: Cougar LG
 CVE-2014-3924 (Multiple cross-site scripting (XSS) vulnerabilities in Webmin before ...)
 	NOT-FOR-US: Webmin
 CVE-2014-3923 (Multiple cross-site scripting (XSS) vulnerabilities in the Digital ...)