[Secure-testing-commits] r50150 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-28 21:47:28 +0000 (Tue, 28 Mar 2017)
New Revision: 50150

Modified:
   data/CVE/list
Log:
android updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-28 21:28:15 UTC (rev 50149)
+++ data/CVE/list	2017-03-28 21:47:28 UTC (rev 50150)
@@ -37633,7 +37633,7 @@
 CVE-2016-3922 (libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 ...)
 	NOT-FOR-US: Android Telephony
 CVE-2016-3921 (libsysutils/src/FrameworkListener.cpp in Framework Listener in Android ...)
-	- android-platform-system-core <unfixed> (bug #858177)
+	- android-platform-system-core <not-affected> (libsysutils not included, bug #858177)
 CVE-2016-3920 (id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before ...)
 	NOT-FOR-US: libstagefright
 CVE-2016-3919
@@ -37705,7 +37705,7 @@
 CVE-2016-3886 (systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI ...)
 	NOT-FOR-US: Android
 CVE-2016-3885 (debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, ...)
-	- android-platform-system-core <unfixed> (bug #858177)
+	- android-platform-system-core <not-affected> (debugged not provided, see bug #858177)
 CVE-2016-3884 (server/notification/NotificationManagerService.java in the ...)
 	NOT-FOR-US: Android
 CVE-2016-3883 (internal/telephony/SMSDispatcher.java in Telephony in Android 4.x ...)
@@ -37755,7 +37755,8 @@
 CVE-2016-3862 (media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, ...)
 	NOT-FOR-US: libstagefright
 CVE-2016-3861 (LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before ...)
-	- android-platform-system-core <unfixed> (bug #858177)
+	- android-platform-system-core 1:7.0.0+r1-4  (unimportant; bug #858177)
+	NOTE: Not running as a privileged process in SDK
 CVE-2016-3860 (sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver ...)
 	NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-3859 (The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, ...)