[Secure-testing-commits] r50414 - data/CVE

Thu Apr 6 17:44:17 UTC 2017

Author: carnil
Date: 2017-04-06 17:44:17 +0000 (Thu, 06 Apr 2017)
New Revision: 50414

Modified:
   data/CVE/list
Log:
Add upstream commit for CVE-2017-5951 and mark no-dsa

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-04-06 17:44:07 UTC (rev 50413)
+++ data/CVE/list	2017-04-06 17:44:17 UTC (rev 50414)
@@ -4469,7 +4469,9 @@
 	RESERVED
 CVE-2017-5951 (The mem_get_bits_rectangle function in base/gdevmem.c in Artifex ...)
 	- ghostscript <unfixed> (bug #859696)
+	[jessie] - ghostscript <no-dsa> (Minor issue)
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=697548
+	NOTE: Fixed by: http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git;a=commitdiff;h=bfa6b2ecbe48edc69a7d9d22a12419aed25960b8
 CVE-2017-5950 (The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) ...)
 	- yaml-cpp <unfixed>
 	- yaml-cpp0.3 <unfixed>


