[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs (remaining open issues are for webkit, which will probably have an advisory on it's own)

Tue Apr 3 09:33:23 BST 2018

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
da3dac59 by Moritz Muehlenhoff at 2018-04-03T10:32:42+02:00
NFUs (remaining open issues are for webkit, which will probably have an advisory on it's own)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================

--- a/data/CVE/list
+++ b/data/CVE/list
@@ -13405,7 +13405,7 @@ CVE-2018-4174 (An issue was discovered in certain Apple products. iOS before 11.
 CVE-2018-4173
 	RESERVED
 CVE-2018-4172 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4171
 	RESERVED
 CVE-2018-4170 (An issue was discovered in certain Apple products. macOS before ...)
@@ -13413,7 +13413,7 @@ CVE-2018-4170 (An issue was discovered in certain Apple products. macOS before .
 CVE-2018-4169
 	RESERVED
 CVE-2018-4168 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4167 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	NOT-FOR-US: Apple
 CVE-2018-4166 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
@@ -13421,7 +13421,7 @@ CVE-2018-4166 (An issue was discovered in certain Apple products. iOS before 11.
 CVE-2018-4165 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	TODO: check
 CVE-2018-4164 (An issue was discovered in certain Apple products. Xcode before 9.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4163 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	TODO: check
 CVE-2018-4162 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
@@ -13451,9 +13451,9 @@ CVE-2018-4151 (An issue was discovered in certain Apple products. iOS before 11.
 CVE-2018-4150 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	NOT-FOR-US: Apple
 CVE-2018-4149 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4148 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4147
 	RESERVED
 CVE-2018-4146 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
@@ -13469,19 +13469,19 @@ CVE-2018-4142 (An issue was discovered in certain Apple products. iOS before 11.
 CVE-2018-4141
 	RESERVED
 CVE-2018-4140 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4139 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: Apple
 CVE-2018-4138 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: NVIDIA graphics driver for MacOS
 CVE-2018-4137 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4136 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: Apple
 CVE-2018-4135 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: Apple
 CVE-2018-4134 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4133 (An issue was discovered in certain Apple products. Safari before 11.1 ...)
 	TODO: check
 CVE-2018-4132 (An issue was discovered in certain Apple products. macOS before ...)
@@ -13501,9 +13501,9 @@ CVE-2018-4126
 CVE-2018-4125 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	TODO: check
 CVE-2018-4124 (An issue was discovered in certain Apple products. iOS before 11.2.6 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4123 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4122 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	TODO: check
 CVE-2018-4121 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
@@ -13517,7 +13517,7 @@ CVE-2018-4118 (An issue was discovered in certain Apple products. iOS before 11.
 CVE-2018-4117 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	TODO: check
 CVE-2018-4116 (An issue was discovered in certain Apple products. Safari before 11.1 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4115 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	NOT-FOR-US: Apple
 CVE-2018-4114 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
@@ -13529,9 +13529,9 @@ CVE-2018-4112 (An issue was discovered in certain Apple products. macOS before .
 CVE-2018-4111 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: Apple
 CVE-2018-4110 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4109 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4108 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: Apple
 CVE-2018-4107 (An issue was discovered in certain Apple products. macOS before ...)
@@ -13545,17 +13545,17 @@ CVE-2018-4104 (An issue was discovered in certain Apple products. iOS before 11.
 CVE-2018-4103
 	RESERVED
 CVE-2018-4102 (An issue was discovered in certain Apple products. Safari before 11.1 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4101 (An issue was discovered in certain Apple products. iOS before 11.3 is ...)
 	TODO: check
 CVE-2018-4100 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4099
 	RESERVED
 CVE-2018-4098 (An issue was discovered in certain Apple products. macOS before ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4097 (An issue was discovered in certain Apple products. macOS before ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4096 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
 	- webkit2gtk 2.18.6-1 (unimportant)
 	[stretch] - webkit2gtk 2.18.6-1~deb9u1
@@ -13565,15 +13565,15 @@ CVE-2018-4095 (An issue was discovered in certain Apple products. iOS before 11.
 	NOT-FOR-US: Apple bluetoothd
 	NOTE: https://blog.zimperium.com/cve-2018-4087-poc-escaping-sandbox-misleading-bluetoothd/
 CVE-2018-4094 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4093 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4092 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4091 (An issue was discovered in certain Apple products. macOS before ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4090 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4089 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
 	- webkit2gtk 2.18.6-1 (unimportant)
 	[stretch] - webkit2gtk 2.18.6-1~deb9u1
@@ -13588,15 +13588,15 @@ CVE-2018-4087 (An issue was discovered in certain Apple products. iOS before 11.
 	NOT-FOR-US: Apple bluetoothd
 	NOTE: https://blog.zimperium.com/cve-2018-4087-poc-escaping-sandbox-misleading-bluetoothd/
 CVE-2018-4086 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4085 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4084 (An issue was discovered in certain Apple products. macOS before ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4083 (An issue was discovered in certain Apple products. macOS before ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4082 (An issue was discovered in certain Apple products. iOS before 11.2.5 ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2018-4081
 	RESERVED
 CVE-2018-4080



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/da3dac5979e29221467dedb3c897f1a67d33011a

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/da3dac5979e29221467dedb3c897f1a67d33011a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180403/7fb637dd/attachment.html>
