automatic update

git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@52631 e39458fd-73e7-0310-bf30-c45bca0a0e42

1 files changed, 114 insertions, 96 deletions

diff --git a/data/CVE/list b/data/CVE/list
index 8c6bbdc35c..cf3a666160 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,21 @@
+CVE-2017-9734
+	RESERVED
+CVE-2017-9733
+	RESERVED
+CVE-2017-9732
+	RESERVED
+CVE-2017-9731 (In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for ...)
+	TODO: check
+CVE-2017-9730
+	RESERVED
+CVE-2017-9729 (In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) ...)
+	TODO: check
+CVE-2017-9728 (In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp ...)
+	TODO: check
+CVE-2017-9727
+	RESERVED
+CVE-2017-9726
+	RESERVED
 CVE-2017-9735 [timing channel in Password.java]
 	- jetty9 <unfixed> (bug #864898)
 	- jetty8 <removed>
@@ -271,96 +289,96 @@ CVE-2017-9605 (The vmw_gb_surface_define_ioctl function (accessible via ...)
 	NOTE: Fixed by: https://git.kernel.org/linus/07678eca2cf9c9a18584e546c2b2a0d0c9a3150c (v4.12-rc5)
 CVE-2017-9603 (SQL injection vulnerability in the WP Jobs plugin before 1.5 for ...)
 	NOT-FOR-US: WP Jobs plugin for WordPress
-CVE-2017-9602
-	RESERVED
-CVE-2017-9601
-	RESERVED
-CVE-2017-9600
-	RESERVED
-CVE-2017-9599
-	RESERVED
-CVE-2017-9598
-	RESERVED
-CVE-2017-9597
-	RESERVED
-CVE-2017-9596
-	RESERVED
-CVE-2017-9595
-	RESERVED
-CVE-2017-9594
-	RESERVED
-CVE-2017-9593
-	RESERVED
-CVE-2017-9592
-	RESERVED
-CVE-2017-9591
-	RESERVED
-CVE-2017-9590
-	RESERVED
-CVE-2017-9589
-	RESERVED
-CVE-2017-9588
-	RESERVED
-CVE-2017-9587
-	RESERVED
-CVE-2017-9586
-	RESERVED
-CVE-2017-9585
-	RESERVED
-CVE-2017-9584
-	RESERVED
-CVE-2017-9583
-	RESERVED
-CVE-2017-9582
-	RESERVED
-CVE-2017-9581
-	RESERVED
-CVE-2017-9580
-	RESERVED
-CVE-2017-9579
-	RESERVED
-CVE-2017-9578
-	RESERVED
-CVE-2017-9577
-	RESERVED
-CVE-2017-9576
-	RESERVED
-CVE-2017-9575
-	RESERVED
-CVE-2017-9574
-	RESERVED
-CVE-2017-9573
-	RESERVED
-CVE-2017-9572
-	RESERVED
-CVE-2017-9571
-	RESERVED
-CVE-2017-9570
-	RESERVED
-CVE-2017-9569
-	RESERVED
-CVE-2017-9568
-	RESERVED
-CVE-2017-9567
-	RESERVED
-CVE-2017-9566
-	RESERVED
-CVE-2017-9565
-	RESERVED
-CVE-2017-9564
-	RESERVED
-CVE-2017-9563
-	RESERVED
-CVE-2017-9562
-	RESERVED
-CVE-2017-9561
-	RESERVED
-CVE-2017-9560
-	RESERVED
-CVE-2017-9559
-	RESERVED
-CVE-2017-9558
-	RESERVED
+CVE-2017-9602 (KBVault Mysql Free Knowledge Base application package 0.16a comes with ...)
+	TODO: check
+CVE-2017-9601 (The &quot;FNB Kemp Mobile Banking&quot; by First National Bank of Kemp app 3.0.2 ...)
+	TODO: check
+CVE-2017-9600 (The &quot;Peoples Bank Tulsa&quot; by Peoples Bank - OK app 3.0.2 -- aka ...)
+	TODO: check
+CVE-2017-9599 (The &quot;Fountain Trust Mobile Banking&quot; by FOUNTAIN TRUST COMPANY app 3.0.0 ...)
+	TODO: check
+CVE-2017-9598 (The &quot;Morton Credit Union Mobile Banking&quot; by Morton Credit Union app ...)
+	TODO: check
+CVE-2017-9597 (The &quot;Blue Ridge Bank and Trust Co. Mobile Banking&quot; by Blue Ridge Bank ...)
+	TODO: check
+CVE-2017-9596 (The &quot;CFB Mobile Banking&quot; by Citizens First Bank Wisconsin app 3.0.1 -- ...)
+	TODO: check
+CVE-2017-9595 (The &quot;First State Bank of Bigfork Mobile Banking&quot; by First State Bank of ...)
+	TODO: check
+CVE-2017-9594 (The &quot;SVB Mobile&quot; by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9593 (The &quot;Oculina Mobile Banking&quot; by Oculina Bank app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9592 (The &quot;Your Legacy Federal Credit Union Mobile Banking&quot; by Your Legacy ...)
+	TODO: check
+CVE-2017-9591 (The &quot;PCB Mobile&quot; by Phelps County Bank app 3.0.2 -- aka ...)
+	TODO: check
+CVE-2017-9590 (The &quot;State Bank of Waterloo Mobile Banking&quot; by State Bank of Waterloo ...)
+	TODO: check
+CVE-2017-9589 (The &quot;SCSB Shelbyville IL Mobile Banking&quot; by Shelby County State Bank ...)
+	TODO: check
+CVE-2017-9588 (The &quot;Oritani Mobile Banking&quot; by Oritani Bank app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9587 (The &quot;PCSB BANK Mobile&quot; by PCSB Bank app 3.0.4 -- aka ...)
+	TODO: check
+CVE-2017-9586 (The &quot;FSBY Mobile Banking&quot; by First State Bank of Yoakum TX app 3.0.0 -- ...)
+	TODO: check
+CVE-2017-9585 (The &quot;Community State Bank - Lamar Mobile Banking&quot; by Community State ...)
+	TODO: check
+CVE-2017-9584 (The &quot;HBO Mobile Banking&quot; by Heritage Bank of Ozarks app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9583 (The &quot;Charlevoix State Bank&quot; by Charlevoix State Bank app 3.0.1 -- aka ...)
+	TODO: check
+CVE-2017-9582 (The &quot;BNB Mobile Banking&quot; by Brady National Bank app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9581 (The &quot;Algonquin State Bank Mobile Banking&quot; by Algonquin State Bank app ...)
+	TODO: check
+CVE-2017-9580 (The &quot;Pioneer Bank &amp; Trust Mobile Banking&quot; by PIONEER BANK AND TRUST app ...)
+	TODO: check
+CVE-2017-9579 (The &quot;JMCU Mobile Banking&quot; by Joplin Metro Credit Union app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9578 (The &quot;RVCB Mobile&quot; by RVCB Mobile Banking app 3.0.0 -- aka ...)
+	TODO: check
+CVE-2017-9577 (The &quot;First Citizens Bank-Mobile Banking&quot; by First Citizens Bank (AL) ...)
+	TODO: check
+CVE-2017-9576 (The &quot;Middleton Community Bank Mobile Banking&quot; by Middleton Community ...)
+	TODO: check
+CVE-2017-9575 (The &quot;FVB Mobile Banking&quot; by First Volunteer Bank of Tennessee app 3.1.1 ...)
+	TODO: check
+CVE-2017-9574 (The &quot;KC Area Credit Union Mobile Banking&quot; by K C Area Credit Union app ...)
+	TODO: check
+CVE-2017-9573 (The North Adams State Bank (Ursa) nasb-mobile-banking/id980573797 app ...)
+	TODO: check
+CVE-2017-9572 (The athens-state-bank-mobile-banking/id719748589 app 3.0.0 for iOS does ...)
+	TODO: check
+CVE-2017-9571 (The Citizens Community Bank (TN) ccb-mobile-banking/id610030469 app ...)
+	TODO: check
+CVE-2017-9570 (The mount-vernon-bank-trust-mobile-banking/id542706679 app 3.0.0 for ...)
+	TODO: check
+CVE-2017-9569 (The Citizens Bank (TX) cbtx-on-the-go/id892396102 app 3.0.0 for iOS ...)
+	TODO: check
+CVE-2017-9568 (The financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does ...)
+	TODO: check
+CVE-2017-9567 (The avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not ...)
+	TODO: check
+CVE-2017-9566 (The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not ...)
+	TODO: check
+CVE-2017-9565 (The first-security-bank-sleepy-eye-mobile/id870531890 app 3.0.0 for iOS ...)
+	TODO: check
+CVE-2017-9564 (The community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify ...)
+	TODO: check
+CVE-2017-9563 (The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS ...)
+	TODO: check
+CVE-2017-9562 (The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 ...)
+	TODO: check
+CVE-2017-9561 (The Lee Bank &amp; Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does ...)
+	TODO: check
+CVE-2017-9560 (The cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not ...)
+	TODO: check
+CVE-2017-9559 (The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not ...)
+	TODO: check
+CVE-2017-9558 (The wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS ...)
+	TODO: check
 CVE-2017-9557 (register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 ...)
 	NOT-FOR-US: EFS Software Easy Chat Server
 CVE-2017-9556
@@ -5114,8 +5132,8 @@ CVE-2017-7885 (Artifex jbig2dec 0.13 has a heap-based buffer over-read leading t
 	- jbig2dec 0.13-4.1 (bug #860460)
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=697703
 	NOTE: Fixed by: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=b184e783702246e15
-CVE-2017-7884
-	RESERVED
+CVE-2017-7884 (In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default ...)
+	TODO: check
 CVE-2017-7889 (The mm subsystem in the Linux kernel through 4.10.10 does not properly ...)
 	- linux 4.9.25-1
 	NOTE: Fixed by: https://git.kernel.org/linus/a4866aa812518ed1a37d8ea0c881dc946409de94 (v4.11-rc7)
@@ -6286,8 +6304,8 @@ CVE-2017-7509
 	NOT-FOR-US: Red Hat Certificate System
 CVE-2017-7508
 	RESERVED
-CVE-2017-7507 [Crash upon receiving well-formed status_request extension]
-	RESERVED
+CVE-2017-7507 (GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer ...)
+	{DSA-3884-1}
 	[experimental] - gnutls28 3.5.13-1
 	- gnutls28 3.5.8-6 (bug #864560)
 	- gnutls26 <removed>
@@ -8194,8 +8212,8 @@ CVE-2017-6901
 	RESERVED
 CVE-2017-6900
 	RESERVED
-CVE-2017-6899
-	RESERVED
+CVE-2017-6899 (The msm_bus_dbg_update_request_write function in ...)
+	TODO: check
 CVE-2017-6898
 	RESERVED
 CVE-2017-6897