[Secure-testing-commits] r58605 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-15 13:03:18 +0000 (Fri, 15 Dec 2017)
New Revision: 58605

Modified:
   data/CVE/list
Log:
Mark CVE-2017-17527 as unimportant

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-15 10:34:48 UTC (rev 58604)
+++ data/CVE/list	2017-12-15 13:03:18 UTC (rev 58605)
@@ -2426,8 +2426,10 @@
 	- scummvm <unfixed>
 	NOTE: https://sources.debian.org/src/scummvm/1.9.0+dfsg-2/backends/platform/sdl/posix/posix.cpp/?hl=274#L274
 CVE-2017-17527 (delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate ...)
-	- pasdoc <unfixed>
+	- pasdoc <unfixed> (unimportant)
 	NOTE: https://sources.debian.org/src/pasdoc/0.14.0-1/source/delphi_gui/WWWBrowserRunnerDM.pas/?hl=63#L63
+	NOTE: Marked as unimportant since issue in unused code. MITRE marks CVE as
+	NOTE: disputed.
 CVE-2017-17526 (Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings ...)
 	- giac <unfixed>
 	NOTE: https://sources.debian.org/src/giac/1.2.3.57+dfsg1-2/src/Input.cc/?hl=68#L77