[Secure-testing-commits] r54884 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-08-19 10:08:13 +0000 (Sat, 19 Aug 2017)
New Revision: 54884

Modified:
   data/CVE/list
Log:
pspp non-issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-19 09:50:04 UTC (rev 54883)
+++ data/CVE/list	2017-08-19 10:08:13 UTC (rev 54884)
@@ -10,20 +10,25 @@
 	- libsass <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482331
 CVE-2017-12961 (There is an assertion abort in the function parse_attributes() in ...)
-	- pspp <unfixed>
+	- pspp <unfixed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482436
+	NOTE: Crash in CLI tool, no security impact
 CVE-2017-12960 (There is a reachable assertion abort in the function dict_rename_var() ...)
-	- pspp <unfixed>
+	- pspp <unfixed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482433
+	NOTE: Crash in CLI tool, no security impact
 CVE-2017-12959 (There is a reachable assertion abort in the function dict_add_mrset() ...)
-	- pspp <unfixed>
+	- pspp <unfixed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482432
+	NOTE: Crash in CLI tool, no security impact
 CVE-2017-12958 (There is an illegal address access in the function output_hex() in ...)
-	- pspp <unfixed>
+	- pspp <unfixed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482429
+	NOTE: Crash in CLI tool, no security impact
 CVE-2017-12957 (There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that ...)
-	- exiv2 <unfixed>
+	- pspp <unfixed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482423
+	NOTE: Crash in CLI tool, no security impact
 CVE-2017-12956 (There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() ...)
 	- exiv2 <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482296