[Secure-testing-commits] r55324 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2017-08-31 17:05:03 +0000 (Thu, 31 Aug 2017)
New Revision: 55324

Modified:
   data/CVE/list
Log:
Add some preliminary results of my tests on exiv2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-31 15:59:41 UTC (rev 55323)
+++ data/CVE/list	2017-08-31 17:05:03 UTC (rev 55324)
@@ -6549,6 +6549,8 @@
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/54
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1471772
+	NOTE: Not reproducible in wheezy/jessie/stretch.
+	NOTE: Reproducible with 0.26-1 (experimental).
 CVE-2017-11552 (The mad_decoder_run function in decoder.c in libmad 0.15.1b allows ...)
 	- libmad <unfixed> (low; bug #870406)
 	[stretch] - libmad <no-dsa> (Minor issue)
@@ -7151,30 +7153,40 @@
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/53
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470950
+	NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type".
+	NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
 CVE-2017-11339 (There is a heap-based buffer overflow in the Image::printIFDStructure ...)
 	- exiv2 <unfixed> (bug #868578)
 	[stretch] - exiv2 <no-dsa> (Minor issue)
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/52
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470946
+	NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type".
+	NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
 CVE-2017-11338 (There is an infinite loop in the Exiv2::Image::printIFDStructure ...)
 	- exiv2 <unfixed> (bug #868578)
 	[stretch] - exiv2 <no-dsa> (Minor issue)
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/51
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470913
+	NOTE: Not reproducible in wheezy/jessie/stretch, I get "No Exif data found in the file".
+	NOTE: Reproducible with 0.26-1 (experimental).
 CVE-2017-11337 (There is an invalid free in the Action::TaskFactory::cleanup function ...)
 	- exiv2 <unfixed> (bug #868578)
 	[stretch] - exiv2 <no-dsa> (Minor issue)
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/50
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470737
+	NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind), I get "No Exif data found in the file".
+	NOTE: Reproducible with 0.26-1 (experimental).
 CVE-2017-11336 (There is a heap-based buffer over-read in the Image::printIFDStructure ...)
 	- exiv2 <unfixed> (bug #868578)
 	[stretch] - exiv2 <no-dsa> (Minor issue)
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/49
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470729
+	NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind).
+	NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
 CVE-2017-11335 (There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF ...)
 	- tiff 4.0.8-4 (bug #868513)
 	[stretch] - tiff <no-dsa> (Minor issue)