[Secure-testing-commits] r55014 - data/CVE

Wed Aug 23 21:21:19 UTC 2017

Author: carnil
Date: 2017-08-23 21:21:19 +0000 (Wed, 23 Aug 2017)
New Revision: 55014

Modified:
   data/CVE/list
Log:
Add CVE-2017-12858/libzip

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-08-23 21:19:36 UTC (rev 55013)
+++ data/CVE/list	2017-08-23 21:21:19 UTC (rev 55014)
@@ -2220,7 +2220,8 @@
 CVE-2017-12859 (NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS ...)
 	NOT-FOR-US: NetApp
 CVE-2017-12858 (Double free vulnerability in the _zip_dirent_read function in ...)
-	TODO: check
+	- libzip <unfixed>
+	NOTE: https://github.com/nih-at/libzip/commit/2217022b7d1142738656d891e00b3d2d9179b796
 CVE-2017-12857
 	RESERVED
 CVE-2017-12856


