[Secure-testing-commits] r56793 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-18 05:00:15 +0000 (Wed, 18 Oct 2017)
New Revision: 56793

Modified:
   data/CVE/list
Log:
Add first set of CVEs for mysql via Oracle CPU

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-18 04:44:03 UTC (rev 56792)
+++ data/CVE/list	2017-10-18 05:00:15 UTC (rev 56793)
@@ -14995,6 +14995,9 @@
 	RESERVED
 CVE-2017-10384
 	RESERVED
+	- mysql-5.7 <unfixed> (bug #878398)
+	- mysql-5.5 <removed> (bug #878402)
+	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10383
 	RESERVED
 CVE-2017-10382
@@ -15005,8 +15008,14 @@
 	RESERVED
 CVE-2017-10379
 	RESERVED
+	- mysql-5.7 <unfixed> (bug #878398)
+	- mysql-5.5 <removed> (bug #878402)
+	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10378
 	RESERVED
+	- mysql-5.7 <not-affected> (Fixed before initial release to Debian, upstream 5.7.12)
+	- mysql-5.5 <removed> (bug #878402)
+	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10377
 	RESERVED
 CVE-2017-10376
@@ -15211,6 +15220,9 @@
 	RESERVED
 CVE-2017-10276
 	RESERVED
+	- mysql-5.7 <unfixed> (bug #878398)
+	- mysql-5.5 <not-affected> (Only affects MySQL 5.6 and 5.7)
+	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10275
 	RESERVED
 CVE-2017-10274
@@ -15471,6 +15483,9 @@
 	NOT-FOR-US: Oracle
 CVE-2017-10167
 	RESERVED
+	- mysql-5.7 <unfixed> (bug #878398)
+	- mysql-5.5 <not-affected> (Only affects MySQL 5.7)
+	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10166
 	RESERVED
 CVE-2017-10165
@@ -15495,6 +15510,9 @@
 	NOT-FOR-US: Oracle
 CVE-2017-10155
 	RESERVED
+	- mysql-5.7 <unfixed> (bug #878398)
+	- mysql-5.5 <not-affected> (Only affects MySQL 5.6 and 5.7)
+	NOTE: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
 CVE-2017-10154
 	RESERVED
 	NOT-FOR-US: Java Advanced Management Console