[Secure-testing-commits] r54873 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-08-19 09:10:15 +0000 (Sat, 19 Aug 2017)
New Revision: 54873

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-19 08:45:36 UTC (rev 54872)
+++ data/CVE/list	2017-08-19 09:10:15 UTC (rev 54873)
@@ -1,3 +1,23 @@
+CVE-2017-12964 (There is a stack consumption issue in LibSass 3.4.5 that is triggered ...)
+	TODO: check
+CVE-2017-12963 (There is an illegal address access in Sass::Eval::operator() in ...)
+	TODO: check
+CVE-2017-12962 (There are memory leaks in LibSass 3.4.5 triggered by deeply nested ...)
+	TODO: check
+CVE-2017-12961 (There is an assertion abort in the function parse_attributes() in ...)
+	TODO: check
+CVE-2017-12960 (There is a reachable assertion abort in the function dict_rename_var() ...)
+	TODO: check
+CVE-2017-12959 (There is a reachable assertion abort in the function dict_add_mrset() ...)
+	TODO: check
+CVE-2017-12958 (There is an illegal address access in the function output_hex() in ...)
+	TODO: check
+CVE-2017-12957 (There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that ...)
+	TODO: check
+CVE-2017-12956 (There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() ...)
+	TODO: check
+CVE-2017-12955 (There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The ...)
+	TODO: check
 CVE-2017-12954
 	RESERVED
 CVE-2017-12953