[Secure-testing-commits] r48943 - data/CVE

[Sebastien Delafond]

Author: seb
Date: 2017-02-15 09:01:58 + (Wed, 15 Feb 2017)
New Revision: 48943

Modified:
   data/CVE/list
Log:
Add https://bitbucket.org/openpyxl/openpyxl/issues/749 as a note to openpyxl XXE

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 07:50:35 UTC (rev 48942)
+++ data/CVE/list   2017-02-15 09:01:58 UTC (rev 48943)
@@ -342,6 +342,7 @@
- openpyxl  (bug #854442)
[wheezy] - openpyxl  (vulnerable code not present)
NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/07/5
+   NOTE: https://bitbucket.org/openpyxl/openpyxl/issues/749
NOTE: https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1
 CVE-2017- [gnome-keyring lives on after ssh session stops]
- gnome-keyring  (low; bug #395572)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48944 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-02-15 09:10:11 + (Wed, 15 Feb 2017)
New Revision: 48944

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 09:01:58 UTC (rev 48943)
+++ data/CVE/list   2017-02-15 09:10:11 UTC (rev 48944)
@@ -1,3 +1,11 @@
+CVE-2017-5991 (An issue was discovered in Artifex Software, Inc. MuPDF before 
...)
+   TODO: check
+CVE-2017-5990 (An issue was discovered in PhreeBooksERP before 2017-02-13. The 
...)
+   TODO: check
+CVE-2017-5989
+   RESERVED
+CVE-2017-5988
+   RESERVED
 CVE-2017-5987 [sd: infinite loop issue in multi block transfers]
RESERVED
- qemu 
@@ -8261,64 +8269,64 @@
RESERVED
 CVE-2017-2997
RESERVED
-CVE-2017-2996
-   RESERVED
-CVE-2017-2995
-   RESERVED
-CVE-2017-2994
-   RESERVED
-CVE-2017-2993
-   RESERVED
-CVE-2017-2992
-   RESERVED
-CVE-2017-2991
-   RESERVED
-CVE-2017-2990
-   RESERVED
+CVE-2017-2996 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2995 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2994 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2993 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2992 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2991 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2990 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
 CVE-2017-2989
RESERVED
-CVE-2017-2988
-   RESERVED
-CVE-2017-2987
-   RESERVED
-CVE-2017-2986
-   RESERVED
-CVE-2017-2985
-   RESERVED
-CVE-2017-2984
-   RESERVED
+CVE-2017-2988 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2987 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2986 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2985 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2984 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
 CVE-2017-2983
RESERVED
-CVE-2017-2982
-   RESERVED
-CVE-2017-2981
-   RESERVED
-CVE-2017-2980
-   RESERVED
-CVE-2017-2979
-   RESERVED
-CVE-2017-2978
-   RESERVED
-CVE-2017-2977
-   RESERVED
-CVE-2017-2976
-   RESERVED
-CVE-2017-2975
-   RESERVED
-CVE-2017-2974
-   RESERVED
-CVE-2017-2973
-   RESERVED
+CVE-2017-2982 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2981 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2980 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2979 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2978 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2977 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2976 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2975 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2974 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
+CVE-2017-2973 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
+   TODO: check
 CVE-2017-2972 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
 CVE-2017-2971 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
 CVE-2017-2970 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
-CVE-2017-2969
-   RESERVED
-CVE-2017-2968
-   RESERVED
+CVE-2017-2969 (Adobe Campaign versions 16.4 Build 8724 and earlier have a 
cross-site ...)
+   TODO: check
+CVE-2017-2968 (Adobe Campaign versions 16.4 Build 8724 and earlier have a code 
...)
+   TODO: check
 CVE-2017-2967 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
 CVE-2017-2966 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)


__

[Secure-testing-commits] r48945 - data/CVE

[Sebastien Delafond]

Author: seb
Date: 2017-02-15 11:06:05 + (Wed, 15 Feb 2017)
New Revision: 48945

Modified:
   data/CVE/list
Log:
openpyxl in jessie is unaffected by XXE

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 09:10:11 UTC (rev 48944)
+++ data/CVE/list   2017-02-15 11:06:05 UTC (rev 48945)
@@ -349,6 +349,7 @@
 CVE-2017- [openpyxl XML External Entity (XXE) vulnerability]
- openpyxl  (bug #854442)
[wheezy] - openpyxl  (vulnerable code not present)
+   [jessie] - openpyxl  (vulnerable code not present)
NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/07/5
NOTE: https://bitbucket.org/openpyxl/openpyxl/issues/749
NOTE: https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48946 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 11:58:53 + (Wed, 15 Feb 2017)
New Revision: 48946

Modified:
   data/CVE/list
Log:
glibc regex issue unimportant
mysql no-dsa
NFUs


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 11:06:05 UTC (rev 48945)
+++ data/CVE/list   2017-02-15 11:58:53 UTC (rev 48946)
@@ -7407,6 +7407,7 @@
- mysql-5.7  (Fixed before initial release in Debian)
- mysql-5.6  (Fixed before initial release in Debian)
- mysql-5.5  (bug #854713)
+   [jessie] - mysql-5.5  (Can wait until the next Oracle CPU)
NOTE: Fixed by: 
https://github.com/mysql/mysql-server/commit/4797ea0b772d5f4c5889bc552424132806f46e93
NOTE: Fixed in Oracle MySQL 5.6.21, 5.7.5
NOTE: https://bugs.mysql.com/bug.php?id=70429
@@ -8271,53 +8272,53 @@
 CVE-2017-2997
RESERVED
 CVE-2017-2996 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2995 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2994 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2993 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2992 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2991 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2990 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2989
RESERVED
 CVE-2017-2988 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2987 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2986 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2985 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2984 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2983
RESERVED
 CVE-2017-2982 (Adobe Flash Player versions 24.0.0.194 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe Flash
 CVE-2017-2981 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2980 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2979 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2978 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2977 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2976 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2975 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2974 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2973 (Adobe Digital Editions versions 4.5.3 and earlier have an 
exploitable ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2972 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
 CVE-2017-2971 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
@@ -8325,9 +8326,9 @@
 CVE-2017-2970 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
 CVE-2017-2969 (Adobe Campaign versions 16.4 Build 8724 and earlier have a 
cross-site ...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2968 (Adobe Campaign versions 16.4 Build 8724 and earlier have a code 
...)
-   TODO: check
+   NOT-FOR-US: Adobe
 CVE-2017-2967 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
NOT-FOR-US: Adobe Acrobat Reader
 CVE-2017-2966 (Adobe Acrobat Reader versions 15.020.20042 and earlier, 
15.006.30244 ...)
@@ -65422,9 +65423,9 @@
NOT-FOR-U

[Secure-testing-commits] r48947 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 12:47:54 + (Wed, 15 Feb 2017)
New Revision: 48947

Modified:
   data/CVE/list
Log:
"new" linux issue


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 11:58:53 UTC (rev 48946)
+++ data/CVE/list   2017-02-15 12:47:54 UTC (rev 48947)
@@ -27288,7 +27288,7 @@
 CVE-2014-9871 (Multiple buffer overflows in ...)
- linux  (Android-specific driver)
 CVE-2014-9870 (The Linux kernel before 3.11 on ARM platforms, as used in 
Android ...)
-   TODO: check
+   - linux 3.11.5-1
 CVE-2014-9869 (drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c 
in the ...)
- linux  (Android-specific driver)
 CVE-2014-9868 (drivers/media/platform/msm/camera_v2/sensor/csiphy/msm_csiphy.c 
in the ...)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48948 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 13:15:54 + (Wed, 15 Feb 2017)
New Revision: 48948

Modified:
   data/CVE/list
Log:
add upstream bug for kodi


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 12:47:54 UTC (rev 48947)
+++ data/CVE/list   2017-02-15 13:15:54 UTC (rev 48948)
@@ -24,7 +24,9 @@
 CVE-2017-5982 [local file inclusion]
RESERVED
- kodi 
+   - xbmc 
NOTE: http://seclists.org/fulldisclosure/2017/Feb/27
+   NOTE: http://trac.kodi.tv/ticket/17314
 CVE-2017-5681
RESERVED
 CVE-2017- [tomcat DoS via infinite loop in HTTPS request processing]


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48949 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 13:19:41 + (Wed, 15 Feb 2017)
New Revision: 48949

Modified:
   data/CVE/list
Log:
Order top-town one entry

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 13:15:54 UTC (rev 48948)
+++ data/CVE/list   2017-02-15 13:19:41 UTC (rev 48949)
@@ -350,8 +350,8 @@
NOTE: 
https://github.com/viewvc/viewvc/commit/9dcfc7daa4c940992920d3b2fbd317da20e44aad
 CVE-2017- [openpyxl XML External Entity (XXE) vulnerability]
- openpyxl  (bug #854442)
+   [jessie] - openpyxl  (vulnerable code not present)
[wheezy] - openpyxl  (vulnerable code not present)
-   [jessie] - openpyxl  (vulnerable code not present)
NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/07/5
NOTE: https://bitbucket.org/openpyxl/openpyxl/issues/749
NOTE: https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48950 - data/DSA

[Sebastien Delafond]

Author: seb
Date: 2017-02-15 13:23:10 + (Wed, 15 Feb 2017)
New Revision: 48950

Modified:
   data/DSA/list
Log:
Reserve DSA-3789-1 for libevent (CVE-2016-10195, CVE-2016-10196, CVE-2016-10197)

Modified: data/DSA/list
===
--- data/DSA/list   2017-02-15 13:19:41 UTC (rev 48949)
+++ data/DSA/list   2017-02-15 13:23:10 UTC (rev 48950)
@@ -1,3 +1,6 @@
+[15 Feb 2017] DSA-3789-1 libevent - security update
+   {CVE-2016-10195 CVE-2016-10196 CVE-2016-10197}
+   [jessie] - libevent 2.0.21-stable-2+deb8u1
 [13 Feb 2017] DSA-3788-1 tomcat8 - security update
[jessie] - tomcat8 8.0.14-1+deb8u7
 [13 Feb 2017] DSA-3787-1 tomcat7 - security update


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48951 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 13:23:39 + (Wed, 15 Feb 2017)
New Revision: 48951

Modified:
   data/CVE/list
Log:
Add CVE-2017-2630/qemu

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 13:23:10 UTC (rev 48950)
+++ data/CVE/list   2017-02-15 13:23:39 UTC (rev 48951)
@@ -9283,8 +9283,13 @@
RESERVED
 CVE-2017-2631
RESERVED
-CVE-2017-2630
+CVE-2017-2630 [nbd: oob stack write in client routine drop_sync]
RESERVED
+   - qemu 
+   - qemu-kvm 
+   NOTE: Upstream patch: 
https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01246.html
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422415
+   TODO: check affected versions
 CVE-2017-2629
RESERVED
 CVE-2017-2628


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48952 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 13:25:21 + (Wed, 15 Feb 2017)
New Revision: 48952

Modified:
   data/CVE/list
Log:
Add new xen issue

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 13:23:39 UTC (rev 48951)
+++ data/CVE/list   2017-02-15 13:25:21 UTC (rev 48952)
@@ -1,3 +1,6 @@
+CVE-2017- [XSA-207: memory leak when destroying guest without PT devices]
+   - xen 
+   NOTE: https://xenbits.xen.org/xsa/advisory-207.html
 CVE-2017-5991 (An issue was discovered in Artifex Software, Inc. MuPDF before 
...)
TODO: check
 CVE-2017-5990 (An issue was discovered in PhreeBooksERP before 2017-02-13. The 
...)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48953 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 13:28:03 + (Wed, 15 Feb 2017)
New Revision: 48953

Modified:
   data/CVE/list
Log:
Add temporary entry for libytnef issues, no CVEs are assigned yet

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 13:25:21 UTC (rev 48952)
+++ data/CVE/list   2017-02-15 13:28:03 UTC (rev 48953)
@@ -1,3 +1,7 @@
+CVE-2017- [9 issues in ytnef -- X41-2017-002]
+   - libytnef 
+   NOTE: https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
+   NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/15/4
 CVE-2017- [XSA-207: memory leak when destroying guest without PT devices]
- xen 
NOTE: https://xenbits.xen.org/xsa/advisory-207.html


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48954 - in data: . DLA

[Balint Reczey]

Author: rbalint
Date: 2017-02-15 15:12:40 + (Wed, 15 Feb 2017)
New Revision: 48954

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA-824-1 for libevent

Modified: data/DLA/list
===
--- data/DLA/list   2017-02-15 13:28:03 UTC (rev 48953)
+++ data/DLA/list   2017-02-15 15:12:40 UTC (rev 48954)
@@ -1,3 +1,6 @@
+[15 Feb 2017] DLA-824-1 libevent - security update
+   {CVE-2016-10195 CVE-2016-10196 CVE-2016-10197}
+   [wheezy] - libevent 2.0.19-stable-3+deb7u2
 [14 Feb 2017] DLA-823-1 tomcat7 - security update
[wheezy] - tomcat7 7.0.28-4+deb7u10
 [13 Feb 2017] DLA-822-1 vim - security update

Modified: data/dla-needed.txt
===
--- data/dla-needed.txt 2017-02-15 13:28:03 UTC (rev 48953)
+++ data/dla-needed.txt 2017-02-15 15:12:40 UTC (rev 48954)
@@ -64,8 +64,6 @@
   NOTE: Upstream should provide new point-releases fixing open security issues 
in the next months.
   NOTE: Lots of CVEs are open, this is going to take some time. (See 
debian-lts ML)
 --
-libevent (Roberto C. Sánchez)
---
 libical
   NOTE: No known solution as of 2017-01-16.
   NOTE: Pinged on 2017-02-06 
https://github.com/libical/libical/issues/253#issuecomment-277580552 (lamby)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48955 - data/CVE

[Sebastien Delafond]

Author: seb
Date: 2017-02-15 16:47:15 + (Wed, 15 Feb 2017)
New Revision: 48955

Modified:
   data/CVE/list
Log:
openpyxl XXE is CVE-2017-5992.

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 15:12:40 UTC (rev 48954)
+++ data/CVE/list   2017-02-15 16:47:15 UTC (rev 48955)
@@ -355,7 +355,7 @@
- viewvc 1.1.26-1 (bug #854681)
NOTE: http://www.openwall.com/lists/oss-security/2017/02/08/7
NOTE: 
https://github.com/viewvc/viewvc/commit/9dcfc7daa4c940992920d3b2fbd317da20e44aad
-CVE-2017- [openpyxl XML External Entity (XXE) vulnerability]
+CVE-2017-5992 [openpyxl XML External Entity (XXE) vulnerability]
- openpyxl  (bug #854442)
[jessie] - openpyxl  (vulnerable code not present)
[wheezy] - openpyxl  (vulnerable code not present)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48956 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 17:42:34 + (Wed, 15 Feb 2017)
New Revision: 48956

Modified:
   data/CVE/list
Log:
Remove CVE request annotation since CVE assigned

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 16:47:15 UTC (rev 48955)
+++ data/CVE/list   2017-02-15 17:42:34 UTC (rev 48956)
@@ -359,7 +359,7 @@
- openpyxl  (bug #854442)
[jessie] - openpyxl  (vulnerable code not present)
[wheezy] - openpyxl  (vulnerable code not present)
-   NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/07/5
+   NOTE: http://www.openwall.com/lists/oss-security/2017/02/07/5
NOTE: https://bitbucket.org/openpyxl/openpyxl/issues/749
NOTE: https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1
 CVE-2017- [gnome-keyring lives on after ssh session stops]


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48957 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 17:44:01 + (Wed, 15 Feb 2017)
New Revision: 48957

Modified:
   data/CVE/list
Log:
Mark CVE-2014-9870 as no-dsa

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 17:42:34 UTC (rev 48956)
+++ data/CVE/list   2017-02-15 17:44:01 UTC (rev 48957)
@@ -27303,6 +27303,7 @@
- linux  (Android-specific driver)
 CVE-2014-9870 (The Linux kernel before 3.11 on ARM platforms, as used in 
Android ...)
- linux 3.11.5-1
+   [wheezy] - linux  (Minor issue, hardly a security impact, cf. 
kernel-sec)
 CVE-2014-9869 (drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c 
in the ...)
- linux  (Android-specific driver)
 CVE-2014-9868 (drivers/media/platform/msm/camera_v2/sensor/csiphy/msm_csiphy.c 
in the ...)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48958 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 17:53:58 + (Wed, 15 Feb 2017)
New Revision: 48958

Modified:
   data/CVE/list
Log:
Update information for CVE-2016-8636/linux

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 17:44:01 UTC (rev 48957)
+++ data/CVE/list   2017-02-15 17:53:58 UTC (rev 48958)
@@ -17882,6 +17882,8 @@
 CVE-2016-8636 [mem_check_range integer overflow]
RESERVED
- linux 
+   [jessie] - linux  (Vulnerable code not present)
+   [wheezy] - linux  (Vulnerable code not present)
NOTE: Fix 
https://github.com/torvalds/linux/commit/647bf3d8a8e5777319da92af672289b2a6c4dc66
 CVE-2016-8635 [small-subgroups attack flaw]
RESERVED


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48959 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 17:55:08 + (Wed, 15 Feb 2017)
New Revision: 48959

Modified:
   data/CVE/list
Log:
Mark CVE-2016-10147 n/a for jessie and wheezy

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 17:53:58 UTC (rev 48958)
+++ data/CVE/list   2017-02-15 17:55:08 UTC (rev 48959)
@@ -2075,6 +2075,8 @@
RESERVED
 CVE-2016-10147 (crypto/mcryptd.c in the Linux kernel before 4.8.15 allows 
local users ...)
- linux 4.8.15-1
+   [jessie] - linux  (Vulnerable code not present)
+   [wheezy] - linux  (Vulnerable code not present)
NOTE: Fixed by: 
https://git.kernel.org/linus/48a992727d82cb7db076fa15d372178743b1f4cd (v4.9)
 CVE-2016-10143 (A vulnerability in Tiki Wiki CMS 15.2 could allow a remote 
attacker to ...)
- tikiwiki 


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48960 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 18:03:05 + (Wed, 15 Feb 2017)
New Revision: 48960

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 17:55:08 UTC (rev 48959)
+++ data/CVE/list   2017-02-15 18:03:05 UTC (rev 48960)
@@ -38024,43 +38024,43 @@
 CVE-2016-2484 (libstagefright in mediaserver in Android 4.x before 4.4.4, 
5.0.x ...)
NOT-FOR-US: libstagefright
 CVE-2016-2483 (The mm-video-v4l2 venc component in mediaserver in Android 4.x 
before ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2482 (The mm-video-v4l2 vdec component in mediaserver in Android 4.x 
before ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2481 (The mm-video-v4l2 venc component in mediaserver in Android 4.x 
before ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2480 (The mm-video-v4l2 vidc component in mediaserver in Android 4.x 
before ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2479 (The mm-video-v4l2 vdec component in mediaserver in Android 4.x 
before ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2478 (mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver 
in ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2477 (mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver 
in ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2476 (mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 
5.1.x ...)
-   TODO: check
+   NOT-FOR-US: Android Mediaserver
 CVE-2016-2475 (The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 
5, ...)
-   TODO: check
+   NOT-FOR-US: Broadcom driver for Android
 CVE-2016-2474 (The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 
5X ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2473 (The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 
7 ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2472 (The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 
7 ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2471 (The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 
7 ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2470 (The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 
7 ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2469 (The Qualcomm sound driver in Android before 2016-06-01 on Nexus 
5, 6, ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2468 (The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 
5, 5X, ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2467 (The Qualcomm sound driver in Android before 2016-06-01 on Nexus 
5 ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2466 (The Qualcomm sound driver in Android before 2016-06-01 on Nexus 
6 ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2465 (The Qualcomm video driver in Android before 2016-06-01 on Nexus 
5, 5X, ...)
-   TODO: check
+   NOT-FOR-US: Qualcomm driver for Android
 CVE-2016-2464 (libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 
5.0.x ...)
TODO: check
 CVE-2016-2463 (Multiple integer overflows in the h264dec component in 
libstagefright ...)
@@ -38839,7 +38839,7 @@
 CVE-2016-2247
REJECTED
 CVE-2016-2246 (HP ThinPro 4.4 through 6.1 mishandles the keyboard layout 
control ...)
-   TODO: check
+   NOT-FOR-US: HP ThinPro
 CVE-2016-2245 (HP Support Assistant before 8.1.52.1 allows remote attackers to 
bypass ...)
NOT-FOR-US: HP Support Assistant
 CVE-2016-2244 (HP LaserJet printers and MFPs and OfficeJet Enterprise printers 
with ...)
@@ -38884,7 +38884,7 @@
NOTE: Possibly introduced after 
http://vcs.pcre.org/pcre?view=revision&revision=1266
NOTE: Fixed by: http://vcs.pcre.org/pcre?view=revision&revision=1638 
(8.39)
 CVE-2016-2242 (Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers 
to ...)
-   TODO: check
+   NOT-FOR-US: Exponent CMS
 CVE-2016-2241
RESERVED
 CVE-2016-2240
@@ -43142,7 +43142,7 @@
NOTE: https://github.com/Dolibarr/dolibarr/issues/4291
NOTE: 
https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8
 CVE-2015-8684 (Exponent CMS before 2.3.7 does not properly restrict the types 
of ...)
-   TODO: check
+   NOT-FOR-US: Exponent CMS
 CVE-2015-8682 (The Video0 driver in Huawei P8 smartphones with software 
GRA-UL00 ...)
TODO: check
 CVE-2015-8681 (The ovisp driver in Huawei P8 smartphones with software 
GRA-TL00 ...)
@@ -46134,15 +46134,15 @@
 CVE-2015-8524

[Secure-testing-commits] r48961 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 18:12:08 + (Wed, 15 Feb 2017)
New Revision: 48961

Modified:
   data/CVE/list
Log:
Reported bug for CVE-2017-5982 to ask clarification from maintainers

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:03:05 UTC (rev 48960)
+++ data/CVE/list   2017-02-15 18:12:08 UTC (rev 48961)
@@ -30,7 +30,7 @@
RESERVED
 CVE-2017-5982 [local file inclusion]
RESERVED
-   - kodi 
+   - kodi  (bug #855225)
- xbmc 
NOTE: http://seclists.org/fulldisclosure/2017/Feb/27
NOTE: http://trac.kodi.tv/ticket/17314


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48962 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 18:18:59 + (Wed, 15 Feb 2017)
New Revision: 48962

Modified:
   data/CVE/list
Log:
new mupdf issue


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:12:08 UTC (rev 48961)
+++ data/CVE/list   2017-02-15 18:18:59 UTC (rev 48962)
@@ -6,7 +6,9 @@
- xen 
NOTE: https://xenbits.xen.org/xsa/advisory-207.html
 CVE-2017-5991 (An issue was discovered in Artifex Software, Inc. MuPDF before 
...)
-   TODO: check
+   - mupdf  (low)
+   NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=697500
+   NOTE: 
http://git.ghostscript.com/?p=mupdf.git;h=1912de5f08e90af1d9d0a9791f58ba3afdb9d465
 CVE-2017-5990 (An issue was discovered in PhreeBooksERP before 2017-02-13. The 
...)
TODO: check
 CVE-2017-5989


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48963 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 18:21:06 + (Wed, 15 Feb 2017)
New Revision: 48963

Modified:
   data/CVE/list
Log:
Update information for CVE-2017-2630/qemu

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:18:59 UTC (rev 48962)
+++ data/CVE/list   2017-02-15 18:21:06 UTC (rev 48963)
@@ -9297,10 +9297,11 @@
 CVE-2017-2630 [nbd: oob stack write in client routine drop_sync]
RESERVED
- qemu 
-   - qemu-kvm 
+   [jessie] - qemu  (Vulnerable code introduced in 
v2.8.0-rc0)
+   [wheezy] - qemu  (Vulnerable code introduced in 
v2.8.0-rc0)
+   - qemu-kvm  (Vulnerable code introduced later)
NOTE: Upstream patch: 
https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01246.html
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422415
-   TODO: check affected versions
 CVE-2017-2629
RESERVED
 CVE-2017-2628


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48964 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 18:24:26 + (Wed, 15 Feb 2017)
New Revision: 48964

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-2630, #855227

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:21:06 UTC (rev 48963)
+++ data/CVE/list   2017-02-15 18:24:26 UTC (rev 48964)
@@ -9296,7 +9296,7 @@
RESERVED
 CVE-2017-2630 [nbd: oob stack write in client routine drop_sync]
RESERVED
-   - qemu 
+   - qemu  (bug #855227)
[jessie] - qemu  (Vulnerable code introduced in 
v2.8.0-rc0)
[wheezy] - qemu  (Vulnerable code introduced in 
v2.8.0-rc0)
- qemu-kvm  (Vulnerable code introduced later)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48965 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 18:44:42 + (Wed, 15 Feb 2017)
New Revision: 48965

Modified:
   data/CVE/list
Log:
Add CVE-2017-5993/virglrenderer

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:24:26 UTC (rev 48964)
+++ data/CVE/list   2017-02-15 18:44:42 UTC (rev 48965)
@@ -5,6 +5,10 @@
 CVE-2017- [XSA-207: memory leak when destroying guest without PT devices]
- xen 
NOTE: https://xenbits.xen.org/xsa/advisory-207.html
+CVE-2017-5993 [host memory leakage when initialising blitter context]
+   - virglrenderer 
+   NOTE: 
https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422438
 CVE-2017-5991 (An issue was discovered in Artifex Software, Inc. MuPDF before 
...)
- mupdf  (low)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=697500


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48966 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 18:45:43 + (Wed, 15 Feb 2017)
New Revision: 48966

Modified:
   data/CVE/list
Log:
Add CVE-2017-5994/virglrenderer

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:44:42 UTC (rev 48965)
+++ data/CVE/list   2017-02-15 18:45:43 UTC (rev 48966)
@@ -5,6 +5,10 @@
 CVE-2017- [XSA-207: memory leak when destroying guest without PT devices]
- xen 
NOTE: https://xenbits.xen.org/xsa/advisory-207.html
+CVE-2017-5994 [out-of-bounds access in vrend_create_vertex_elements_state]
+   - virglrenderer 
+   NOTE: 
https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422452
 CVE-2017-5993 [host memory leakage when initialising blitter context]
- virglrenderer 
NOTE: 
https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48967 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 18:47:05 + (Wed, 15 Feb 2017)
New Revision: 48967

Modified:
   data/CVE/list
Log:
gst-plugins-bad0.10, podofo no-dsa


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 18:45:43 UTC (rev 48966)
+++ data/CVE/list   2017-02-15 18:47:05 UTC (rev 48967)
@@ -797,6 +797,7 @@
 CVE-2017-5848 (The gst_ps_demux_parse_psm function in 
gst/mpegdemux/gstmpegdemux.c in ...)
- gst-plugins-bad1.0  (low)
- gst-plugins-bad0.10  (low)
+   [jessie] - gst-plugins-bad0.10  (Minor issue)
NOTE: http://www.openwall.com/lists/oss-security/2017/02/01/7
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=777957
NOTE: Patch: https://bugzilla.gnome.org/show_bug.cgi?id=777957#c3
@@ -824,6 +825,7 @@
 CVE-2017-5843 (Multiple use-after-free vulnerabilities in the (1) ...)
- gst-plugins-bad1.0 1.10.3-1
- gst-plugins-bad0.10  (low)
+   [jessie] - gst-plugins-bad0.10  (Minor issue)
NOTE: http://www.openwall.com/lists/oss-security/2017/02/01/7
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=777503
 CVE-2017-5842 (The html_context_handle_element function in 
gst/subparse/samiparse.c ...)
@@ -922,32 +924,38 @@
NOT-FOR-US: festivaltts4r
 CVE-2017- [podofo: NULL pointer dereference in PdfInfo::GuessFormat 
(pdfinfo.cpp)]
- libpodofo  (bug #854605)
+   [jessie] - libpodofo  (Minor issue)
NOTE: 
https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-pdfinfoguessformat-pdfinfo-cpp/
NOTE: 
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/12497325.VLNgGImML2%40blackgate/#msg35640936
NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/02/21
 CVE-2015-8981 [Heap overflow in the function ReadXRefSubsection]
RESERVED
- libpodofo 0.9.4-1 (bug #854599)
+   [jessie] - libpodofo  (Minor issue)
NOTE: https://sourceforge.net/p/podofo/mailman/message/34205419/
NOTE: https://sourceforge.net/p/podofo/code/1672
 CVE-2017-5855 [NULL pointer dereference in 
PoDoFo::PdfParser::ReadXRefSubsection]
RESERVED
- libpodofo  (bug #854603)
+   [jessie] - libpodofo  (Minor issue)
NOTE: 
https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-podofopdfparserreadxrefsubsection-pdfparser-cpp
NOTE: 
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/12497325.VLNgGImML2%40blackgate/#msg35640936
 CVE-2017-5854 [NULL pointer dereference in PdfOutputStream.cpp]
RESERVED
- libpodofo  (bug #854602)
+   [jessie] - libpodofo  (Minor issue)
NOTE: 
https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-pdfoutputstream-cpp
NOTE: 
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/12497325.VLNgGImML2%40blackgate/#msg35640936
 CVE-2017-5853 [Signed integer overflow in PdfParser.cpp]
RESERVED
- libpodofo  (bug #854601)
+   [jessie] - libpodofo  (Minor issue)
NOTE: 
https://blogs.gentoo.org/ago/2017/02/01/podofo-signed-integer-overflow-in-pdfparser-cpp
NOTE: 
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/12497325.VLNgGImML2%40blackgate/#msg35640936
 CVE-2017-5852 [Infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject]
RESERVED
- libpodofo  (bug #854600)
+   [jessie] - libpodofo  (Minor issue)
NOTE: 
https://blogs.gentoo.org/ago/2017/02/01/podofo-infinite-loop-in-podofopdfpagegetinheritedkeyfromobject-pdfpage-cpp
NOTE: 
https://sourceforge.net/p/podofo/mailman/podofo-users/thread/12497325.VLNgGImML2%40blackgate/#msg35640936
 CVE-2017-5849 [Out-of-Bound read and write issues in put1bitbwtile() and 
putgreytile()]


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48968 - data

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 19:14:58 + (Wed, 15 Feb 2017)
New Revision: 48968

Modified:
   data/dsa-needed.txt
Log:
Add spice and take

Modified: data/dsa-needed.txt
===
--- data/dsa-needed.txt 2017-02-15 18:47:05 UTC (rev 48967)
+++ data/dsa-needed.txt 2017-02-15 19:14:58 UTC (rev 48968)
@@ -35,6 +35,8 @@
 qemu
   Maintainer asked to prepare updates
 --
+spice (carnil)
+--
 spip
 --
 xen


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48969 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 19:35:55 + (Wed, 15 Feb 2017)
New Revision: 48969

Modified:
   data/CVE/list
Log:
Replace spice commits with official ones from upstream

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 19:14:58 UTC (rev 48968)
+++ data/CVE/list   2017-02-15 19:35:55 UTC (rev 48969)
@@ -14558,11 +14558,12 @@
 CVE-2016-9578
RESERVED
- spice  (bug #854336)
-   NOTE: Fixed by 
http://pkgs.fedoraproject.org/cgit/rpms/spice.git/commit/?id=d919d639ae5f83a9735a04d843eed675f9357c0d
+   NOTE: Fixed by: 
https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=1c6517973095a67c8cb57f3550fc1298404ab556
 (0.12.x)
+   NOTE: Fixed by: 
https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=f66dc643635518e53dfbe5262f814a64eec54e4a
 (0.12.x)
 CVE-2016-9577
RESERVED
- spice  (bug #854336)
-   NOTE: Fixed by 
http://pkgs.fedoraproject.org/cgit/rpms/spice.git/commit/?id=d919d639ae5f83a9735a04d843eed675f9357c0d
+   NOTE: Fixed by: 
https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=5f96b596353d73bdf4bb3cd2de61e48a7fd5b4c3
 (0.12.x)
 CVE-2016-10088 (The sg implementation in the Linux kernel through 4.9 does not 
...)
{DLA-772-1}
- linux 4.8.15-2


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48970 - data

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 19:51:33 + (Wed, 15 Feb 2017)
New Revision: 48970

Modified:
   data/dsa-needed.txt
Log:
Spice packages prepared for jessie

Modified: data/dsa-needed.txt
===
--- data/dsa-needed.txt 2017-02-15 19:35:55 UTC (rev 48969)
+++ data/dsa-needed.txt 2017-02-15 19:51:33 UTC (rev 48970)
@@ -36,6 +36,7 @@
   Maintainer asked to prepare updates
 --
 spice (carnil)
+  Packages prepared, waiting for peer-review by a second team member
 --
 spip
 --


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48971 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-15 19:52:33 + (Wed, 15 Feb 2017)
New Revision: 48971

Modified:
   data/CVE/list
Log:
Record fix for spice which will enter the archive in 2h

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 19:51:33 UTC (rev 48970)
+++ data/CVE/list   2017-02-15 19:52:33 UTC (rev 48971)
@@ -14557,12 +14557,12 @@
NOTE: http://tracker.ceph.com/issues/18187
 CVE-2016-9578
RESERVED
-   - spice  (bug #854336)
+   - spice 0.12.8-2.1 (bug #854336)
NOTE: Fixed by: 
https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=1c6517973095a67c8cb57f3550fc1298404ab556
 (0.12.x)
NOTE: Fixed by: 
https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=f66dc643635518e53dfbe5262f814a64eec54e4a
 (0.12.x)
 CVE-2016-9577
RESERVED
-   - spice  (bug #854336)
+   - spice 0.12.8-2.1 (bug #854336)
NOTE: Fixed by: 
https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=5f96b596353d73bdf4bb3cd2de61e48a7fd5b4c3
 (0.12.x)
 CVE-2016-10088 (The sg implementation in the Linux kernel through 4.9 does not 
...)
{DLA-772-1}


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48972 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-02-15 21:10:14 + (Wed, 15 Feb 2017)
New Revision: 48972

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 19:52:33 UTC (rev 48971)
+++ data/CVE/list   2017-02-15 21:10:14 UTC (rev 48972)
@@ -1,3 +1,15 @@
+CVE-2017-6000
+   RESERVED
+CVE-2017-5999
+   RESERVED
+CVE-2017-5998
+   RESERVED
+CVE-2017-5997 (The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 
allows ...)
+   TODO: check
+CVE-2017-5996
+   RESERVED
+CVE-2017-5995
+   RESERVED
 CVE-2017- [9 issues in ytnef -- X41-2017-002]
- libytnef 
NOTE: https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
@@ -6,10 +18,12 @@
- xen 
NOTE: https://xenbits.xen.org/xsa/advisory-207.html
 CVE-2017-5994 [out-of-bounds access in vrend_create_vertex_elements_state]
+   RESERVED
- virglrenderer 
NOTE: 
https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422452
 CVE-2017-5993 [host memory leakage when initialising blitter context]
+   RESERVED
- virglrenderer 
NOTE: 
https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422438
@@ -291,8 +305,7 @@
RESERVED
 CVE-2017-5900
RESERVED
-CVE-2017-5896
-   RESERVED
+CVE-2017-5896 (Heap-based buffer overflow in the fz_subsample_pixmap function 
in ...)
- mupdf  (bug #854734)
[wheezy] - mupdf  (vulnerable code not present)
NOTE: http://seclists.org/oss-sec/2017/q1/322
@@ -365,7 +378,7 @@
- viewvc 1.1.26-1 (bug #854681)
NOTE: http://www.openwall.com/lists/oss-security/2017/02/08/7
NOTE: 
https://github.com/viewvc/viewvc/commit/9dcfc7daa4c940992920d3b2fbd317da20e44aad
-CVE-2017-5992 [openpyxl XML External Entity (XXE) vulnerability]
+CVE-2017-5992 (Openpyxl 2.4.1 resolves external entities by default, which 
allows ...)
- openpyxl  (bug #854442)
[jessie] - openpyxl  (vulnerable code not present)
[wheezy] - openpyxl  (vulnerable code not present)
@@ -781,16 +794,19 @@
RESERVED
 CVE-2016-10197
RESERVED
+   {DSA-3789-1 DLA-824-1}
- libevent 2.0.21-stable-3 (bug #854092)
NOTE: https://github.com/libevent/libevent/issues/332
NOTE: http://www.openwall.com/lists/oss-security/2017/01/31/17
 CVE-2016-10196
RESERVED
+   {DSA-3789-1 DLA-824-1}
- libevent 2.0.21-stable-3 (bug #854092)
NOTE: https://github.com/libevent/libevent/issues/318
NOTE: http://www.openwall.com/lists/oss-security/2017/01/31/17
 CVE-2016-10195
RESERVED
+   {DSA-3789-1 DLA-824-1}
- libevent 2.0.21-stable-3 (bug #854092)
NOTE: https://github.com/libevent/libevent/issues/317
NOTE: http://www.openwall.com/lists/oss-security/2017/01/31/17
@@ -6211,8 +6227,7 @@
NOTE: For phpmyadmin, unimportant, since embeds lib but does not use in 
exploitable way
NOTE: http://seclists.org/fulldisclosure/2016/Aug/76
NOTE: Upstream patch: 
https://bazaar.launchpad.net/~danilo/php-gettext/trunk/revision/61
-CVE-2015-8979 [remote stack buffer overflow]
-   RESERVED
+CVE-2015-8979 (Stack-based buffer overflow in the parsePresentationContext 
function ...)
{DSA-3749-1 DLA-755-1}
- dcmtk 3.6.1~20160216-2 (bug #848830)
NOTE: 3.6.1~20160216-2 is the first version in unstable containing the 
fix
@@ -12981,8 +12996,8 @@
RESERVED
 CVE-2016-9707
RESERVED
-CVE-2016-9706
-   RESERVED
+CVE-2016-9706 (IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker 
SOAP ...)
+   TODO: check
 CVE-2016-9705
RESERVED
 CVE-2016-9704 (IBM Security Identity Manager Virtual Appliance is vulnerable 
to ...)
@@ -15022,8 +15037,7 @@
NOTE: https://github.com/tats/w3m/issues/32
 CVE-2016-9621
REJECTED
-CVE-2016-9560 [stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)]
-   RESERVED
+CVE-2016-9560 (Stack-based buffer overflow in the jpc_tsfb_getbands2 function 
in ...)
{DSA-3785-1 DLA-739-1}
- jasper 
NOTE: 
https://blogs.gentoo.org/ago/2016/11/20/jasper-stack-based-buffer-overflow-in-jpc_tsfb_getbands2-jpc_tsfb-c
@@ -16776,8 +16790,8 @@
NOTE: 
https://github.com/django/django/commit/da7910d4834726eca596af0a830762fa5fb2dfd9
 CVE-2016-9012 (CloudVision Portal (CVP) before 2016.1.2.1 allows remote 
authenticated ...)
NOT-FOR-US: CloudVision Portal
-CVE-2016-9010
-   RESERVED
+CVE-2016-9010 (IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote 
...)
+   TODO: check
 CVE-2016-9009
RESERVED
 CVE-2016-9008 (IBM UrbanCode Deploy could allow a malicious user to access the 
Agent 

[Secure-testing-commits] r48973 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 22:33:18 + (Wed, 15 Feb 2017)
New Revision: 48973

Modified:
   data/CVE/list
   data/DSA/list
Log:
php issue already fixed


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 21:10:14 UTC (rev 48972)
+++ data/CVE/list   2017-02-15 22:33:18 UTC (rev 48973)
@@ -21596,10 +21596,12 @@
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=73092
NOTE: Fixed in 7.0.15
 CVE-2016-7478 (Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 
7.x ...)
+   {DSA-3732-1}
- php7.1 
- php7.0 
- php5 
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=73093
+   NOTE: Patch for 5.6.x: 
http://git.php.net/?p=php-src.git;a=commit;h=40e7baab3c90001beee4c8f0ed0ef79ad18ee0d6
 (5.6.28)
 CVE-2016-7477
RESERVED
- libav  (unimportant)

Modified: data/DSA/list
===
--- data/DSA/list   2017-02-15 21:10:14 UTC (rev 48972)
+++ data/DSA/list   2017-02-15 22:33:18 UTC (rev 48973)
@@ -174,7 +174,7 @@
{CVE-2016-1252}
[jessie] - apt 1.0.9.8.4
 [13 Dec 2016] DSA-3732-1 php5 - security update
-   {CVE-2016-9138 CVE-2016-9933 CVE-2016-9934}
+   {CVE-2016-9138 CVE-2016-9933 CVE-2016-9934 CVE-2016-7478}
[jessie] - php5 5.6.28+dfsg-0+deb8u1
 [11 Dec 2016] DSA-3731-1 chromium-browser - security update
{CVE-2016-5181 CVE-2016-5182 CVE-2016-5183 CVE-2016-5184 CVE-2016-5185 
CVE-2016-5186 CVE-2016-5187 CVE-2016-5188 CVE-2016-5189 CVE-2016-5190 
CVE-2016-5191 CVE-2016-5192 CVE-2016-5193 CVE-2016-5194 CVE-2016-5198 
CVE-2016-5199 CVE-2016-5200 CVE-2016-5201 CVE-2016-5202 CVE-2016-5203 
CVE-2016-5204 CVE-2016-5205 CVE-2016-5206 CVE-2016-5207 CVE-2016-5208 
CVE-2016-5209 CVE-2016-5210 CVE-2016-5211 CVE-2016-5212 CVE-2016-5213 
CVE-2016-5214 CVE-2016-5215 CVE-2016-5216 CVE-2016-5217 CVE-2016-5218 
CVE-2016-5219 CVE-2016-5220 CVE-2016-5221 CVE-2016-5222 CVE-2016-5223 
CVE-2016-5224 CVE-2016-5225 CVE-2016-5226 CVE-2016-9650 CVE-2016-9651 
CVE-2016-9652}


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48975 - data

[Chris Lamb]

Author: lamby
Date: 2017-02-15 22:39:26 + (Wed, 15 Feb 2017)
New Revision: 48975

Modified:
   data/dla-needed.txt
Log:
Triage libytnef for LTS

Modified: data/dla-needed.txt
===
--- data/dla-needed.txt 2017-02-15 22:39:22 UTC (rev 48974)
+++ data/dla-needed.txt 2017-02-15 22:39:26 UTC (rev 48975)
@@ -90,6 +90,8 @@
 --
 libxml2
 --
+libytnef
+--
 linux
 --
 mcollective


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48974 - data

[Chris Lamb]

Author: lamby
Date: 2017-02-15 22:39:22 + (Wed, 15 Feb 2017)
New Revision: 48974

Modified:
   data/dla-needed.txt
Log:
Triage https://security-tracker.debian.org/tracker/CVE-2016-2399 for LTS

Modified: data/dla-needed.txt
===
--- data/dla-needed.txt 2017-02-15 22:33:18 UTC (rev 48973)
+++ data/dla-needed.txt 2017-02-15 22:39:22 UTC (rev 48974)
@@ -47,6 +47,8 @@
 --
 gtk-vnc
 --
+https://security-tracker.debian.org/tracker/CVE-2016-2399
+--
 icedove
   NOTE: maintainer currenlty planx to rename to thunderbird with the next
   NOTE: upstream version (#851989). Jessie / Wheezy should do the same.


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48976 - data

[Chris Lamb]

Author: lamby
Date: 2017-02-15 22:49:14 + (Wed, 15 Feb 2017)
New Revision: 48976

Modified:
   data/dla-needed.txt
Log:
Revert "Triage https://security-tracker.debian.org/tracker/CVE-2016-2399 for 
LTS"

This reverts commit 02661029a762f8127c1457eac781952a703478f4.

Modified: data/dla-needed.txt
===
--- data/dla-needed.txt 2017-02-15 22:39:26 UTC (rev 48975)
+++ data/dla-needed.txt 2017-02-15 22:49:14 UTC (rev 48976)
@@ -47,8 +47,6 @@
 --
 gtk-vnc
 --
-https://security-tracker.debian.org/tracker/CVE-2016-2399
---
 icedove
   NOTE: maintainer currenlty planx to rename to thunderbird with the next
   NOTE: upstream version (#851989). Jessie / Wheezy should do the same.


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48977 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-15 22:51:21 + (Wed, 15 Feb 2017)
New Revision: 48977

Modified:
   data/CVE/list
Log:
php7 also fixed


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 22:49:14 UTC (rev 48976)
+++ data/CVE/list   2017-02-15 22:51:21 UTC (rev 48977)
@@ -21598,7 +21598,7 @@
 CVE-2016-7478 (Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 
7.x ...)
{DSA-3732-1}
- php7.1 
-   - php7.0 
+   - php7.0 7.0.13-1
- php5 
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=73093
NOTE: Patch for 5.6.x: 
http://git.php.net/?p=php-src.git;a=commit;h=40e7baab3c90001beee4c8f0ed0ef79ad18ee0d6
 (5.6.28)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48978 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:29:07 + (Thu, 16 Feb 2017)
New Revision: 48978

Modified:
   data/CVE/list
Log:
Mark one NFU

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-15 22:51:21 UTC (rev 48977)
+++ data/CVE/list   2017-02-16 04:29:07 UTC (rev 48978)
@@ -5,7 +5,7 @@
 CVE-2017-5998
RESERVED
 CVE-2017-5997 (The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 
allows ...)
-   TODO: check
+   NOT-FOR-US: SAP Message Server
 CVE-2017-5996
RESERVED
 CVE-2017-5995


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48979 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:29:19 + (Thu, 16 Feb 2017)
New Revision: 48979

Modified:
   data/CVE/list
Log:
Add CVE-2017-6001/linux

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:29:07 UTC (rev 48978)
+++ data/CVE/list   2017-02-16 04:29:19 UTC (rev 48979)
@@ -1,3 +1,6 @@
+CVE-2017-6001 [Incomplete fix for CVE-2016-6786]
+   - linux 
+   NOTE: Fixed by: 
https://git.kernel.org/linus/321027c1fe77f892f4ea07846aeae08cefbbb290
 CVE-2017-6000
RESERVED
 CVE-2017-5999


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48980 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:31:36 + (Thu, 16 Feb 2017)
New Revision: 48980

Modified:
   data/CVE/list
Log:
Add TODO note for libytnef

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:29:19 UTC (rev 48979)
+++ data/CVE/list   2017-02-16 04:31:36 UTC (rev 48980)
@@ -17,6 +17,7 @@
- libytnef 
NOTE: https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/
NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2017/02/15/4
+   TODO: wait some days for the CVE assignments (which seem requested by 
x41-dsec), otherwise go ahead with re-request
 CVE-2017- [XSA-207: memory leak when destroying guest without PT devices]
- xen 
NOTE: https://xenbits.xen.org/xsa/advisory-207.html


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48981 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:34:11 + (Thu, 16 Feb 2017)
New Revision: 48981

Modified:
   data/CVE/list
Log:
Add CVE-2016-10225

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:31:36 UTC (rev 48980)
+++ data/CVE/list   2017-02-16 04:34:11 UTC (rev 48981)
@@ -99,6 +99,8 @@
 CVE-2017-5972 (The TCP stack in the Linux kernel 3.x does not properly 
implement a ...)
- linux 
TODO: check/investigate, further triage first in kernel-sec
+CVE-2016-10225
+   NOT-FOR-US: sunxi-debug driver in Allwinner kernel
 CVE-2016-10224 (An issue was discovered in Sauter NovaWeb web HMI. The 
application uses ...)
NOT-FOR-US: Sauter NovaWeb
 CVE-2016-10223 (An issue was discovered in BigTree CMS before 4.2.15. The 
vulnerability ...)


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48982 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:53:46 + (Thu, 16 Feb 2017)
New Revision: 48982

Modified:
   data/CVE/list
Log:
Add CVE-2017-6000/qemu

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:34:11 UTC (rev 48981)
+++ data/CVE/list   2017-02-16 04:53:46 UTC (rev 48982)
@@ -1,8 +1,13 @@
 CVE-2017-6001 [Incomplete fix for CVE-2016-6786]
- linux 
NOTE: Fixed by: 
https://git.kernel.org/linus/321027c1fe77f892f4ea07846aeae08cefbbb290
-CVE-2017-6000
+CVE-2017-6000 [crypto: memory leakage in qcrypto_ivgen_essiv_init]
RESERVED
+   - qemu 
+   - qemu-kvm 
+   NOTE: 
https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg00295.html
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422656#c3
+   TODO: check versions, and as well original analysis by Red Hat was 
incomplete
 CVE-2017-5999
RESERVED
 CVE-2017-5998


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48983 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:56:23 + (Thu, 16 Feb 2017)
New Revision: 48983

Modified:
   data/CVE/list
Log:
Add CVE-2017-5981/zziplib

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:53:46 UTC (rev 48982)
+++ data/CVE/list   2017-02-16 04:56:23 UTC (rev 48983)
@@ -79,8 +79,10 @@
NOTE: Workaround entry for DSA-3787-1 until CVE assigned
NOTE: Since 7.0.72-3, src:tomcat7 only builds the Servlet API
NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=57544
-CVE-2017-5981
+CVE-2017-5981 [assertion failure in seeko.c]
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-assertion-failure-in-seeko-c/
 CVE-2017-5980
RESERVED
 CVE-2017-5979


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48984 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-16 04:59:55 + (Thu, 16 Feb 2017)
New Revision: 48984

Modified:
   data/CVE/list
Log:
More zziplib issues

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:56:23 UTC (rev 48983)
+++ data/CVE/list   2017-02-16 04:59:55 UTC (rev 48984)
@@ -85,18 +85,32 @@
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-assertion-failure-in-seeko-c/
 CVE-2017-5980
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-zzip_mem_entry_new-memdisk-c/
 CVE-2017-5979
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-prescan_entry-fseeko-c/
 CVE-2017-5978
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-out-of-bounds-read-in-zzip_mem_entry_new-memdisk-c/
 CVE-2017-5977
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-invalid-memory-read-in-zzip_mem_entry_extra_block-memdisk-c/
 CVE-2017-5976
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/
 CVE-2017-5975
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get64-fetch-c/
 CVE-2017-5974
RESERVED
+   - zziplib 
+   NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/
 CVE-2017-5973 [Qemu: usb: infinite loop while doing control transfer in 
xhci_kick_epctx]
RESERVED
- qemu 


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48985 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2017-02-16 06:10:33 + (Thu, 16 Feb 2017)
New Revision: 48985

Modified:
   data/CVE/list
Log:
CVE-2017-2621/heat

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 04:59:55 UTC (rev 48984)
+++ data/CVE/list   2017-02-16 06:10:33 UTC (rev 48985)
@@ -9376,8 +9376,11 @@
RESERVED
 CVE-2017-2622
RESERVED
-CVE-2017-2621
+CVE-2017-2621 [/var/log/heat/ is world readable]
RESERVED
+   - heat 
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621
+   TODO: check
 CVE-2017-2620
RESERVED
 CVE-2017-2619


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48986 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2017-02-16 06:11:41 + (Thu, 16 Feb 2017)
New Revision: 48986

Modified:
   data/CVE/list
Log:
CVE-2017-2622

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 06:10:33 UTC (rev 48985)
+++ data/CVE/list   2017-02-16 06:11:41 UTC (rev 48986)
@@ -9374,8 +9374,10 @@
RESERVED
 CVE-2017-2623
RESERVED
-CVE-2017-2622
+CVE-2017-2622 [openstack-mistral: /var/log/mistral/ is world readable]
RESERVED
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2622
+   TODO: check
 CVE-2017-2621 [/var/log/heat/ is world readable]
RESERVED
- heat 


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48987 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2017-02-16 06:13:18 + (Thu, 16 Feb 2017)
New Revision: 48987

Modified:
   data/CVE/list
Log:
CVE-2017-2627

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 06:11:41 UTC (rev 48986)
+++ data/CVE/list   2017-02-16 06:13:18 UTC (rev 48987)
@@ -9364,8 +9364,10 @@
RESERVED
 CVE-2017-2628
RESERVED
-CVE-2017-2627
+CVE-2017-2627 [openstack-tripleo-common: sudoers file is too permissive]
RESERVED
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1421917
+   TODO: check
 CVE-2017-2626
RESERVED
 CVE-2017-2625
@@ -9376,7 +9378,7 @@
RESERVED
 CVE-2017-2622 [openstack-mistral: /var/log/mistral/ is world readable]
RESERVED
-   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2622
+   NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1420992
TODO: check
 CVE-2017-2621 [/var/log/heat/ is world readable]
RESERVED


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48988 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2017-02-16 06:15:33 + (Thu, 16 Feb 2017)
New Revision: 48988

Modified:
   data/CVE/list
Log:
NFU

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 06:13:18 UTC (rev 48987)
+++ data/CVE/list   2017-02-16 06:15:33 UTC (rev 48988)
@@ -1358,6 +1358,7 @@
RESERVED
 CVE-2017-5585
RESERVED
+   NOT-FOR-US: OpenText Documentum Content Server
 CVE-2017-5584
RESERVED
 CVE-2017-5583


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48989 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2017-02-16 06:22:04 + (Thu, 16 Feb 2017)
New Revision: 48989

Modified:
   data/CVE/list
Log:
NFU

Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 06:15:33 UTC (rev 48988)
+++ data/CVE/list   2017-02-16 06:22:04 UTC (rev 48989)
@@ -1356,6 +1356,7 @@
RESERVED
 CVE-2017-5586
RESERVED
+   NOT-FOR-US: OpenText Documentum D2
 CVE-2017-5585
RESERVED
NOT-FOR-US: OpenText Documentum Content Server


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48990 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-16 07:54:57 + (Thu, 16 Feb 2017)
New Revision: 48990

Modified:
   data/CVE/list
Log:
add bug reference for zziplib


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 06:22:04 UTC (rev 48989)
+++ data/CVE/list   2017-02-16 07:54:57 UTC (rev 48990)
@@ -81,35 +81,35 @@
NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=57544
 CVE-2017-5981 [assertion failure in seeko.c]
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-assertion-failure-in-seeko-c/
 CVE-2017-5980
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-zzip_mem_entry_new-memdisk-c/
 CVE-2017-5979
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-prescan_entry-fseeko-c/
 CVE-2017-5978
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-out-of-bounds-read-in-zzip_mem_entry_new-memdisk-c/
 CVE-2017-5977
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-invalid-memory-read-in-zzip_mem_entry_extra_block-memdisk-c/
 CVE-2017-5976
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/
 CVE-2017-5975
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get64-fetch-c/
 CVE-2017-5974
RESERVED
-   - zziplib 
+   - zziplib  (bug #854727)
NOTE: 
http://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/
 CVE-2017-5973 [Qemu: usb: infinite loop while doing control transfer in 
xhci_kick_epctx]
RESERVED


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

[Secure-testing-commits] r48991 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-16 07:57:26 + (Thu, 16 Feb 2017)
New Revision: 48991

Modified:
   data/CVE/list
Log:
qemu n/a for jessie/wheezy


Modified: data/CVE/list
===
--- data/CVE/list   2017-02-16 07:54:57 UTC (rev 48990)
+++ data/CVE/list   2017-02-16 07:57:26 UTC (rev 48991)
@@ -4,10 +4,10 @@
 CVE-2017-6000 [crypto: memory leakage in qcrypto_ivgen_essiv_init]
RESERVED
- qemu 
-   - qemu-kvm 
+   [jessie] - qemu  (Vulnerable code not present)
+   - qemu-kvm  (Vulnerable code not present)
NOTE: 
https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg00295.html
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1422656#c3
-   TODO: check versions, and as well original analysis by Red Hat was 
incomplete
 CVE-2017-5999
RESERVED
 CVE-2017-5998


___
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits