[Secure-testing-commits] r54347 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-08-06 08:55:52 +0000 (Sun, 06 Aug 2017)
New Revision: 54347

Modified:
   data/CVE/list
Log:
ledger bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-06 08:38:42 UTC (rev 54346)
+++ data/CVE/list	2017-08-06 08:55:52 UTC (rev 54347)
@@ -179,12 +179,12 @@
 CVE-2017-12483
 	RESERVED
 CVE-2017-12482 (The ledger::parse_date_mask_routine function in times.cc in Ledger ...)
-	- ledger <unfixed>
+	- ledger <unfixed> (low; bug #870900) 
 	[jessie] - ledger <no-dsa> (Minor issue)
 	[stretch] - ledger <no-dsa> (Minor issue)
 	NOTE: http://bugs.ledger-cli.org/show_bug.cgi?id=1224
 CVE-2017-12481 (The find_option function in option.cc in Ledger 3.1.1 allows remote ...)
-	- ledger <unfixed>
+	- ledger <unfixed> (low; bug #870900) 
 	[jessie] - ledger <no-dsa> (Minor issue)
 	[stretch] - ledger <no-dsa> (Minor issue)
 	NOTE: http://bugs.ledger-cli.org/show_bug.cgi?id=1222