[Secure-testing-commits] r50618 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-04-13 09:25:41 +0000 (Thu, 13 Apr 2017)
New Revision: 50618

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
new wireshark issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-13 09:10:13 UTC (rev 50617)
+++ data/CVE/list	2017-04-13 09:25:41 UTC (rev 50618)
@@ -203,13 +203,27 @@
 CVE-2017-7749
 	RESERVED
 CVE-2017-7748 (In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector ...)
-	TODO: check
+	- wireshark <unfixed> (low)
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2017-21.html
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f55cbcde2c8f74b652add4450b0592082eb6acff
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581
 CVE-2017-7747 (In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2017-18.html
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5cfd52d6629cf8a7ab67c6bacd3431a964f43584
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559
 CVE-2017-7746 (In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector ...)
-	TODO: check
+	- wireshark <unfixed> (low)
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2017-19.html
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=58e69cc769dea24b721abd8a29f9eedc11024b7e
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576
 CVE-2017-7745 (In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector ...)
-	TODO: check
+	- wireshark <unfixed> (low)
+	[jessie] - wireshark <not-affected> (Vulnerable code not present)
+	[wheezy] - wireshark <not-affected> (Vulnerable code not present)
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2017-20.html
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578
 CVE-2017-7744
 	RESERVED
 CVE-2017-7743

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2017-04-13 09:10:13 UTC (rev 50617)
+++ data/dsa-needed.txt	2017-04-13 09:25:41 UTC (rev 50618)
@@ -50,5 +50,7 @@
 --
 spip
 --
+wireshark
+--
 xen
 --