[Secure-testing-commits] r41516 - data/CVE

Thorsten Alteholz alteholz at moszumanska.debian.org
Sat May 7 16:49:20 UTC 2016


Author: alteholz
Date: 2016-05-07 16:49:20 +0000 (Sat, 07 May 2016)
New Revision: 41516

Modified:
   data/CVE/list
Log:
mark CVE for lcms2 as not-affected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-07 14:13:52 UTC (rev 41515)
+++ data/CVE/list	2016-05-07 16:49:20 UTC (rev 41516)
@@ -468,6 +468,7 @@
 CVE-2013-7455
 	RESERVED
 	- lcms2 2.6-1
+	[wheezy] - lcms2 <not-affected> (vulnerable code not present, no cmsPipelineFree(Lut); in Error:-part)
 	NOTE: https://www.kb.cert.org/vuls/id/369800
 	NOTE: https://github.com/mm2/Little-CMS/commit/fefaaa43c382eee632ea3ad0cfa915335140e1db#diff-189a94f0a7a47efdd43f5567e27a973b
 CVE-2016-XXXX [XSS]




More information about the Secure-testing-commits mailing list