Author: sectracker
Date: 2015-12-23 21:10:11 +0000 (Wed, 23 Dec 2015)
New Revision: 38503
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-12-23 19:20:16 UTC (rev 38502)
+++ data/CVE/list 2015-12-23 21:10:11 UTC (rev 38503)
@@ -1,3 +1,403 @@
+CVE-2016-1130
+ RESERVED
+CVE-2016-1129
+ RESERVED
+CVE-2016-1128
+ RESERVED
+CVE-2016-1127
+ RESERVED
+CVE-2016-1126
+ RESERVED
+CVE-2016-1125
+ RESERVED
+CVE-2016-1124
+ RESERVED
+CVE-2016-1123
+ RESERVED
+CVE-2016-1122
+ RESERVED
+CVE-2016-1121
+ RESERVED
+CVE-2016-1120
+ RESERVED
+CVE-2016-1119
+ RESERVED
+CVE-2016-1118
+ RESERVED
+CVE-2016-1117
+ RESERVED
+CVE-2016-1116
+ RESERVED
+CVE-2016-1115
+ RESERVED
+CVE-2016-1114
+ RESERVED
+CVE-2016-1113
+ RESERVED
+CVE-2016-1112
+ RESERVED
+CVE-2016-1111
+ RESERVED
+CVE-2016-1110
+ RESERVED
+CVE-2016-1109
+ RESERVED
+CVE-2016-1108
+ RESERVED
+CVE-2016-1107
+ RESERVED
+CVE-2016-1106
+ RESERVED
+CVE-2016-1105
+ RESERVED
+CVE-2016-1104
+ RESERVED
+CVE-2016-1103
+ RESERVED
+CVE-2016-1102
+ RESERVED
+CVE-2016-1101
+ RESERVED
+CVE-2016-1100
+ RESERVED
+CVE-2016-1099
+ RESERVED
+CVE-2016-1098
+ RESERVED
+CVE-2016-1097
+ RESERVED
+CVE-2016-1096
+ RESERVED
+CVE-2016-1095
+ RESERVED
+CVE-2016-1094
+ RESERVED
+CVE-2016-1093
+ RESERVED
+CVE-2016-1092
+ RESERVED
+CVE-2016-1091
+ RESERVED
+CVE-2016-1090
+ RESERVED
+CVE-2016-1089
+ RESERVED
+CVE-2016-1088
+ RESERVED
+CVE-2016-1087
+ RESERVED
+CVE-2016-1086
+ RESERVED
+CVE-2016-1085
+ RESERVED
+CVE-2016-1084
+ RESERVED
+CVE-2016-1083
+ RESERVED
+CVE-2016-1082
+ RESERVED
+CVE-2016-1081
+ RESERVED
+CVE-2016-1080
+ RESERVED
+CVE-2016-1079
+ RESERVED
+CVE-2016-1078
+ RESERVED
+CVE-2016-1077
+ RESERVED
+CVE-2016-1076
+ RESERVED
+CVE-2016-1075
+ RESERVED
+CVE-2016-1074
+ RESERVED
+CVE-2016-1073
+ RESERVED
+CVE-2016-1072
+ RESERVED
+CVE-2016-1071
+ RESERVED
+CVE-2016-1070
+ RESERVED
+CVE-2016-1069
+ RESERVED
+CVE-2016-1068
+ RESERVED
+CVE-2016-1067
+ RESERVED
+CVE-2016-1066
+ RESERVED
+CVE-2016-1065
+ RESERVED
+CVE-2016-1064
+ RESERVED
+CVE-2016-1063
+ RESERVED
+CVE-2016-1062
+ RESERVED
+CVE-2016-1061
+ RESERVED
+CVE-2016-1060
+ RESERVED
+CVE-2016-1059
+ RESERVED
+CVE-2016-1058
+ RESERVED
+CVE-2016-1057
+ RESERVED
+CVE-2016-1056
+ RESERVED
+CVE-2016-1055
+ RESERVED
+CVE-2016-1054
+ RESERVED
+CVE-2016-1053
+ RESERVED
+CVE-2016-1052
+ RESERVED
+CVE-2016-1051
+ RESERVED
+CVE-2016-1050
+ RESERVED
+CVE-2016-1049
+ RESERVED
+CVE-2016-1048
+ RESERVED
+CVE-2016-1047
+ RESERVED
+CVE-2016-1046
+ RESERVED
+CVE-2016-1045
+ RESERVED
+CVE-2016-1044
+ RESERVED
+CVE-2016-1043
+ RESERVED
+CVE-2016-1042
+ RESERVED
+CVE-2016-1041
+ RESERVED
+CVE-2016-1040
+ RESERVED
+CVE-2016-1039
+ RESERVED
+CVE-2016-1038
+ RESERVED
+CVE-2016-1037
+ RESERVED
+CVE-2016-1036
+ RESERVED
+CVE-2016-1035
+ RESERVED
+CVE-2016-1034
+ RESERVED
+CVE-2016-1033
+ RESERVED
+CVE-2016-1032
+ RESERVED
+CVE-2016-1031
+ RESERVED
+CVE-2016-1030
+ RESERVED
+CVE-2016-1029
+ RESERVED
+CVE-2016-1028
+ RESERVED
+CVE-2016-1027
+ RESERVED
+CVE-2016-1026
+ RESERVED
+CVE-2016-1025
+ RESERVED
+CVE-2016-1024
+ RESERVED
+CVE-2016-1023
+ RESERVED
+CVE-2016-1022
+ RESERVED
+CVE-2016-1021
+ RESERVED
+CVE-2016-1020
+ RESERVED
+CVE-2016-1019
+ RESERVED
+CVE-2016-1018
+ RESERVED
+CVE-2016-1017
+ RESERVED
+CVE-2016-1016
+ RESERVED
+CVE-2016-1015
+ RESERVED
+CVE-2016-1014
+ RESERVED
+CVE-2016-1013
+ RESERVED
+CVE-2016-1012
+ RESERVED
+CVE-2016-1011
+ RESERVED
+CVE-2016-1010
+ RESERVED
+CVE-2016-1009
+ RESERVED
+CVE-2016-1008
+ RESERVED
+CVE-2016-1007
+ RESERVED
+CVE-2016-1006
+ RESERVED
+CVE-2016-1005
+ RESERVED
+CVE-2016-1004
+ RESERVED
+CVE-2016-1003
+ RESERVED
+CVE-2016-1002
+ RESERVED
+CVE-2016-1001
+ RESERVED
+CVE-2016-1000
+ RESERVED
+CVE-2016-0999
+ RESERVED
+CVE-2016-0998
+ RESERVED
+CVE-2016-0997
+ RESERVED
+CVE-2016-0996
+ RESERVED
+CVE-2016-0995
+ RESERVED
+CVE-2016-0994
+ RESERVED
+CVE-2016-0993
+ RESERVED
+CVE-2016-0992
+ RESERVED
+CVE-2016-0991
+ RESERVED
+CVE-2016-0990
+ RESERVED
+CVE-2016-0989
+ RESERVED
+CVE-2016-0988
+ RESERVED
+CVE-2016-0987
+ RESERVED
+CVE-2016-0986
+ RESERVED
+CVE-2016-0985
+ RESERVED
+CVE-2016-0984
+ RESERVED
+CVE-2016-0983
+ RESERVED
+CVE-2016-0982
+ RESERVED
+CVE-2016-0981
+ RESERVED
+CVE-2016-0980
+ RESERVED
+CVE-2016-0979
+ RESERVED
+CVE-2016-0978
+ RESERVED
+CVE-2016-0977
+ RESERVED
+CVE-2016-0976
+ RESERVED
+CVE-2016-0975
+ RESERVED
+CVE-2016-0974
+ RESERVED
+CVE-2016-0973
+ RESERVED
+CVE-2016-0972
+ RESERVED
+CVE-2016-0971
+ RESERVED
+CVE-2016-0970
+ RESERVED
+CVE-2016-0969
+ RESERVED
+CVE-2016-0968
+ RESERVED
+CVE-2016-0967
+ RESERVED
+CVE-2016-0966
+ RESERVED
+CVE-2016-0965
+ RESERVED
+CVE-2016-0964
+ RESERVED
+CVE-2016-0963
+ RESERVED
+CVE-2016-0962
+ RESERVED
+CVE-2016-0961
+ RESERVED
+CVE-2016-0960
+ RESERVED
+CVE-2016-0959
+ RESERVED
+CVE-2016-0958
+ RESERVED
+CVE-2016-0957
+ RESERVED
+CVE-2016-0956
+ RESERVED
+CVE-2016-0955
+ RESERVED
+CVE-2016-0954
+ RESERVED
+CVE-2016-0953
+ RESERVED
+CVE-2016-0952
+ RESERVED
+CVE-2016-0951
+ RESERVED
+CVE-2016-0950
+ RESERVED
+CVE-2016-0949
+ RESERVED
+CVE-2016-0948
+ RESERVED
+CVE-2016-0947
+ RESERVED
+CVE-2016-0946
+ RESERVED
+CVE-2016-0945
+ RESERVED
+CVE-2016-0944
+ RESERVED
+CVE-2016-0943
+ RESERVED
+CVE-2016-0942
+ RESERVED
+CVE-2016-0941
+ RESERVED
+CVE-2016-0940
+ RESERVED
+CVE-2016-0939
+ RESERVED
+CVE-2016-0938
+ RESERVED
+CVE-2016-0937
+ RESERVED
+CVE-2016-0936
+ RESERVED
+CVE-2016-0935
+ RESERVED
+CVE-2016-0934
+ RESERVED
+CVE-2016-0933
+ RESERVED
+CVE-2016-0932
+ RESERVED
+CVE-2016-0931
+ RESERVED
CVE-2015-XXXX [overlay: fix permission checking for setattr]
- linux <unfixed>
[jessie] - linux <not-affected> (Vulnerable code not present)
@@ -40,16 +440,19 @@
[wheezy] - t-coffee <no-dsa> (Minor issue)
[jessie] - t-coffee <no-dsa> (Minor issue)
CVE-2015-8619 [hmp: stack based OOB write in hmp_sendkey routine]
+ RESERVED
- qemu <unfixed>
- qemu-kvm <removed>
NOTE:
https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02930.html
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1283926
TODO: check affected versions
CVE-2015-8617 [format string vulnerability]
+ RESERVED
- php7.0 <unfixed>
NOTE: https://bugs.php.net/bug.php?id=71105
NOTE:
https://github.com/php/php-src/commit/b101a6bbd4f2181c360bd38e7683df4a03cba83e
(php-7.0.2RC1)
CVE-2015-8616 [Use after free in PHP Collator::sortWithSortKeys function]
+ RESERVED
- php7.0 7.0.1-1
NOTE: https://bugs.php.net/bug.php?id=71020
NOTE: http://www.openwall.com/lists/oss-security/2015/12/22/4
@@ -78,6 +481,7 @@
NOTE: http://www.openwall.com/lists/oss-security/2015/12/21/7
TODO: check
CVE-2015-8618 [math/big: fix carry propagation in Int.Exp Montgomery code]
+ RESERVED
- golang <unfixed>
[jessie] - golang <not-affected> (Introduced in 1.5 release)
[wheezy] - golang <not-affected> (Introduced in 1.5 release)
@@ -85,6 +489,7 @@
NOTE: Introduced in 1.5 release. Fixed in 1.5.3 upstream.
NOTE: http://www.openwall.com/lists/oss-security/2015/12/21/6
CVE-2015-8615 [XSA-169: ioreq handling possibly susceptible to multiple read
issue]
+ RESERVED
- xen <unfixed>
[jessie] - xen <not-affected> (Only affects 4.6)
[wheezy] - xen <not-affected> (Only affects 4.6)
@@ -2607,8 +3012,7 @@
TODO: check
CVE-2015-8376
RESERVED
-CVE-2015-8373
- RESERVED
+CVE-2015-8373 (The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC
Kea, ...)
- isc-kea-dhcp-server <itp> (bug #759703)
CVE-2015-8372
RESERVED
@@ -3076,7 +3480,7 @@
NOTE: Introduced by:
https://git.gnome.org/browse/libxml2/commit/?id=826bc320206f70fccd2941a77d363e95e8076898
(v2.9.2-rc1)
NOTE: Fixed by:
https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2
(v2.9.3)
CVE-2015-8241 (The xmlNextChar function in libxml2 2.9.2 does not properly
check the ...)
- {DLA-355-1}
+ {DSA-3430-1 DLA-355-1}
- libxml2 2.9.3+dfsg1-1 (bug #806384)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756263
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe
@@ -3302,7 +3706,7 @@
NOTE: Introduced by:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ec0d215f9420564fc8286dcf93d2d068bb53a07e
(v2.6.26-rc9)
NOTE: Fixed by:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c
(v4.4-rc4)
CVE-2015-8317 (The xmlParseXMLDecl function in parser.c in libxml2 before
2.9.3 ...)
- {DLA-355-1}
+ {DSA-3430-1 DLA-355-1}
- libxml2 2.9.2+zdfsg1-4
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=751631
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e
@@ -3614,6 +4018,7 @@
CVE-2015-8032
RESERVED
CVE-2015-8035 (The xz_decomp function in xzlib.c in libxml2 2.9.1 does not
properly ...)
+ {DSA-3430-1}
- libxml2 2.9.3+dfsg1-1 (bug #803942)
[squeeze] - libxml2 <not-affected> (No LZMA/XZ support in version 2.7.8)
NOTE: Upstream patch:
https://git.gnome.org/browse/libxml2/commit/?id=f0709e3ca8f8947f2d91ed34e92e38a4c23eae63
(v2.9.3)
@@ -3927,10 +4332,10 @@
RESERVED
CVE-2015-7937 (Stack-based buffer overflow in the GoAhead Web Server on
Schneider ...)
TODO: check
-CVE-2015-7936
- RESERVED
-CVE-2015-7935
- RESERVED
+CVE-2015-7936 (Cross-site request forgery (CSRF) vulnerability in Motorola
Solutions ...)
+ TODO: check
+CVE-2015-7935 (Motorola Solutions MOSCAD IP Gateway allows remote attackers to
read ...)
+ TODO: check
CVE-2015-7934
RESERVED
CVE-2015-7933
@@ -3941,18 +4346,18 @@
RESERVED
CVE-2015-7930
RESERVED
-CVE-2015-7929
- RESERVED
-CVE-2015-7928
- RESERVED
-CVE-2015-7927
- RESERVED
-CVE-2015-7926
- RESERVED
-CVE-2015-7925
- RESERVED
-CVE-2015-7924
- RESERVED
+CVE-2015-7929 (eWON devices with firmware through 10.1s0 support unspecified
GET ...)
+ TODO: check
+CVE-2015-7928 (eWON devices with firmware before 10.1s0 do not have an off ...)
+ TODO: check
+CVE-2015-7927 (Cross-site scripting (XSS) vulnerability on eWON devices with
firmware ...)
+ TODO: check
+CVE-2015-7926 (eWON devices with firmware before 10.1s0 omit RBAC for I/O
server ...)
+ TODO: check
+CVE-2015-7925 (Cross-site request forgery (CSRF) vulnerability on eWON devices
with ...)
+ TODO: check
+CVE-2015-7924 (eWON devices with firmware before 10.1s0 do not trigger the
discarding ...)
+ TODO: check
CVE-2015-7923
RESERVED
CVE-2015-7922
@@ -3965,8 +4370,8 @@
TODO: check
CVE-2015-7918 (Multiple buffer overflows in the F1BookView ActiveX control in
F1 ...)
NOT-FOR-US: F1BookView
-CVE-2015-7917
- RESERVED
+CVE-2015-7917 (Untrusted search path vulnerability in Open Automation OPC
Systems.NET ...)
+ TODO: check
CVE-2015-7916
RESERVED
CVE-2015-7915
@@ -3977,8 +4382,8 @@
NOT-FOR-US: AggreGate
CVE-2015-7912 (The Ice Faces servlet in ag_server_service.exe in the AggreGate
Server ...)
NOT-FOR-US: AggreGate
-CVE-2015-7911
- RESERVED
+CVE-2015-7911 (Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60,
...)
+ TODO: check
CVE-2015-7910 (Exemys Telemetry Web Server relies on an HTTP Location header
to ...)
NOT-FOR-US: Exemys
CVE-2015-7909
@@ -5220,19 +5625,23 @@
CVE-2015-7501
RESERVED
CVE-2015-7500 (The xmlParseMisc function in parser.c in libxml2 before 2.9.3
allows ...)
+ {DSA-3430-1}
- libxml2 2.9.3+dfsg1-1
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=f1063fdbe7fa66332bbb76874101c2a7b51b519f
(v2.9.3)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756525 (upstream bug
not yet open)
CVE-2015-7499 (Heap-based buffer overflow in the xmlGROW function in parser.c
in ...)
+ {DSA-3430-1}
- libxml2 2.9.3+dfsg1-1
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc
(v2.9.3)
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da
(v2.9.3)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756479 (upstream bug
not yet open)
CVE-2015-7498 (Heap-based buffer overflow in the xmlParseXmlDecl function in
parser.c ...)
+ {DSA-3430-1}
- libxml2 2.9.3+dfsg1-1
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=afd27c21f6b36e22682b7da20d726bce2dcb2f43
(v2.9.3)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756527 (upstream bug
not yet open)
CVE-2015-7497 (Heap-based buffer overflow in the xmlDictComputeFastQKey
function in ...)
+ {DSA-3430-1}
- libxml2 2.9.3+dfsg1-1
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=6360a31a84efe69d155ed96306b9a931a40beab9
(v2.9.3)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756528 (upstream bug
not yet open)
@@ -6747,8 +7156,7 @@
CVE-2015-6852
RESERVED
NOT-FOR-US: EMC Secure Remote Services Virtual Edition
-CVE-2015-6851
- RESERVED
+CVE-2015-6851 (EMC RSA SecurID Web Agent before 8.0 allows physically
proximate ...)
NOT-FOR-US: RSA SecurID
CVE-2015-6850
RESERVED
@@ -7898,8 +8306,8 @@
RESERVED
CVE-2015-6472
RESERVED
-CVE-2015-6471
- RESERVED
+CVE-2015-6471 (Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on
Form 6 ...)
+ TODO: check
CVE-2015-6470 (Resource Data Management Data Manager before 2.2 allows remote
...)
NOT-FOR-US: Resource Data Manager
CVE-2015-6469 (The interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX
Pro+ ...)
@@ -7978,8 +8386,8 @@
RESERVED
CVE-2015-6432
RESERVED
-CVE-2015-6431
- RESERVED
+CVE-2015-6431 (Cisco IOS XE 16.1.1 allows remote attackers to cause a denial
of ...)
+ TODO: check
CVE-2015-6430
RESERVED
CVE-2015-6429 (The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS
XE 3.15 ...)
@@ -10981,6 +11389,7 @@
NOTE: Broken by:
https://libvirt.org/git/?p=libvirt.git;a=commit;h=c930410bebae0a45889b992a7932c663b06cbbcd
(v1.1.0-rc1)
NOTE: http://security.libvirt.org/2015/0004.html
CVE-2015-5312 (The xmlStringLenDecodeEntities function in parser.c in libxml2
before ...)
+ {DSA-3430-1}
- libxml2 2.9.3+dfsg1-1
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=69030714cde66d525a8884bda01b9e8f0abf8e1e
(v2.9.3)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756733 (upstream bug
not yet open)
@@ -16648,14 +17057,14 @@
NOTE: Fixed by:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543
NOTE: http://www.openwall.com/lists/oss-security/2015/04/20/1
CVE-2015-7942 (The xmlParseConditionalSections function in parser.c in libxml2
does ...)
- {DLA-334-1}
+ {DSA-3430-1 DLA-334-1}
- libxml2 2.9.3+dfsg1-1 (bug #802827)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756456#c0
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=bd0526e66a56e75a18da8c15c4750db8f801c52d
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=41ac9049a27f52e7a1f3b341f8714149fc88d450
CVE-2015-7941 (libxml2 2.9.2 does not properly stop parsing invalid input,
which ...)
- {DLA-266-1}
+ {DSA-3430-1 DLA-266-1}
- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (bug #783010)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=744980
NOTE: http://www.openwall.com/lists/oss-security/2015/04/19/5
@@ -21424,7 +21833,7 @@
NOTE: https://github.com/rest-client/rest-client/issues/369
NOTE: Patch: https://github.com/rest-client/rest-client/pull/365.patch
(will need new dependency to ruby-http-cookie)
CVE-2015-1819 (The xmlreader in libxml allows remote attackers to cause a
denial of ...)
- {DLA-266-1}
+ {DSA-3430-1 DLA-266-1}
- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (low; bug #782782)
NOTE:
https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9
NOTE: Concerns by Florian Weimer:
https://bugzilla.gnome.org/show_bug.cgi?id=748278
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
