[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff jmm at debian.org
Tue Aug 7 18:26:45 BST 2018 

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d29ad29 by Moritz Muehlenhoff at 2018-08-07T17:26:21Z
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -6592,42 +6592,59 @@ CVE-2017-18311
 	RESERVED
 CVE-2017-18310
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18309
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18308
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18307
 	RESERVED
 CVE-2017-18306
 	RESERVED
 CVE-2017-18305
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18304
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18303
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18302
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18301
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18300
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18299
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18298
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18297
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18296
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18295
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18294
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18293
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18292
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2018-12440 (BoringSSL through 2018-06-14 allows a memory-cache side-channel attack ...)
 	- boringssl <itp> (bug #823933)
 CVE-2018-12439 (MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack ...)
@@ -9572,6 +9589,7 @@ CVE-2018-11306
 	RESERVED
 CVE-2018-11305
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2018-11304 (Possible buffer overflow in msm_adsp_stream_callback_put due to lack ...)
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2018-11303
@@ -9662,6 +9680,7 @@ CVE-2018-11261
 	RESERVED
 CVE-2018-11260
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2018-11259 (Due to Improper Access Control of NAND-based EFS in Snapdragon ...)
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2018-11258 (In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon ...)
@@ -9670,12 +9689,16 @@ CVE-2018-11257 (Permissions, Privileges, and Access Controls in TA in Snapdragon
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18283
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18282
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18281
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18280
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2017-18279
 	RESERVED
 	NOT-FOR-US: Qualcomm components for Android
@@ -14192,36 +14215,47 @@ CVE-2018-9460
 	RESERVED
 CVE-2018-9459
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9458
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9457
 	RESERVED
 CVE-2018-9456
 	RESERVED
 CVE-2018-9455
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9454
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9453
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9452
 	RESERVED
 CVE-2018-9451
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9450
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9449
 	RESERVED
 CVE-2018-9448
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9447
 	RESERVED
 CVE-2018-9446
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9445
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9444
 	RESERVED
+	NOT-FOR-US: Android Media Framework
 CVE-2018-9443
 	RESERVED
 CVE-2018-9442
@@ -14234,10 +14268,13 @@ CVE-2018-9439
 	RESERVED
 CVE-2018-9438
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9437
 	RESERVED
+	NOT-FOR-US: Android Media Framework
 CVE-2018-9436
 	RESERVED
+	NOT-FOR-US: Android
 CVE-2018-9435
 	RESERVED
 CVE-2018-9434
@@ -14263,6 +14300,7 @@ CVE-2018-9428
 	NOT-FOR-US: Android Media Framework
 CVE-2018-9427
 	RESERVED
+	NOT-FOR-US: Android Media Framework
 CVE-2018-9426
 	RESERVED
 	NOT-FOR-US: Android
@@ -26240,6 +26278,7 @@ CVE-2018-5384 (Navarino Infinity web interface up to version 2.2 exposes an ...)
 	NOT-FOR-US: Navarino Infinity
 CVE-2018-5383
 	RESERVED
+	NOT-FOR-US: Qualcomm components for Android
 CVE-2018-5382 (Bouncy Castle BKS version 1 keystore (BKS-V1) files use an HMAC that ...)
 	- bouncycastle 1.48+dfsg-2
 	[wheezy] - bouncycastle <ignored> (this only affects the integrity verification and not the content of the BKS keystore)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0d29ad29753e0a82ac9f3fddcb821fa9c552c021

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0d29ad29753e0a82ac9f3fddcb821fa9c552c021
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180807/3696085a/attachment.html>

More information about the debian-security-tracker-commits mailing list