[Secure-testing-commits] r57840 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-11-19 21:10:15 +0000 (Sun, 19 Nov 2017)
New Revision: 57840

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-19 20:13:56 UTC (rev 57839)
+++ data/CVE/list	2017-11-19 21:10:15 UTC (rev 57840)
@@ -1,3 +1,21 @@
+CVE-2017-16893
+	RESERVED
+CVE-2017-16892 (In Bftpd before 4.7, there is a memory leak in the file rename ...)
+	TODO: check
+CVE-2017-16891
+	RESERVED
+CVE-2017-16890
+	RESERVED
+CVE-2017-16889
+	RESERVED
+CVE-2017-16888
+	RESERVED
+CVE-2017-16887
+	RESERVED
+CVE-2017-16886
+	RESERVED
+CVE-2017-16885
+	RESERVED
 CVE-2017-1000404
 	NOT-FOR-US: Jenkins plugin
 CVE-2017-1000403
@@ -18169,7 +18187,7 @@
 CVE-2017-10673 (admin/profile.php in GetSimple CMS 3.x has XSS in a name field. ...)
 	NOT-FOR-US: GetSimple CMS
 CVE-2017-10672 (Use-after-free in the XML-LibXML module through 2.0129 for Perl allows ...)
-	{DLA-1171-1}
+	{DSA-4042-1 DLA-1171-1}
 	- libxml-libxml-perl 2.0128+dfsg-5 (bug #866676)
 	NOTE: https://rt.cpan.org/Public/Bug/Display.html?id=122246
 	NOTE: Pull request: https://github.com/shlomif/perl-XML-LibXML/pull/8
@@ -25802,6 +25820,7 @@
 	RESERVED
 CVE-2017-8028
 	RESERVED
+	{DLA-1180-1}
 	- libspring-ldap-java <removed>
 	NOTE: https://pivotal.io/security/cve-2017-8028
 	NOTE: https://github.com/spring-projects/spring-ldap/issues/430