[Secure-testing-commits] r58660 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-17 20:00:05 +0000 (Sun, 17 Dec 2017)
New Revision: 58660

Modified:
   data/CVE/list
Log:
Mark CVE-2017-17516/rtv as unimportant

The problematic script, and with negligible impact, is only in source
and not installed in the binary package.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-17 19:54:57 UTC (rev 58659)
+++ data/CVE/list	2017-12-17 20:00:05 UTC (rev 58660)
@@ -4926,7 +4926,7 @@
 	[wheezy] - sylpheed <no-dsa> (Minor issue)
 	NOTE: https://sources.debian.org/src/sylpheed/3.5.1-1/libsylph/utils.c/?hl=4292#L4292
 CVE-2017-17516 (scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 ...)
-	- rtv <unfixed>
+	- rtv <unfixed> (unimportant)
 	NOTE: https://sources.debian.org/src/rtv/1.20.0+dfsg-1/scripts/inspect_webbrowser.py/
 CVE-2017-17515 (etc/ObjectList in Metview 4.7.3 does not validate strings before ...)
 	- metview <unfixed> (unimportant)