[Secure-testing-commits] r49050 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-18 12:55:53 +0000 (Sat, 18 Feb 2017)
New Revision: 49050

Modified:
   data/CVE/list
Log:
Add CVE-2017-6060/mupdf, mark as unimportant

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-18 12:41:45 UTC (rev 49049)
+++ data/CVE/list	2017-02-18 12:55:53 UTC (rev 49050)
@@ -32,8 +32,12 @@
 	- sane-backends <unfixed> (bug #854804)
 CVE-2017-6061
 	RESERVED
-CVE-2017-6060
+CVE-2017-6060 [stack-based buffer overflow in main (jstest_main.c)]
 	RESERVED
+	- mupdf <unfixed> (unimportant)
+	NOTE: Although jstest_main.c compiled during build and mujstest is created
+	NOTE: it is not included in the produced binary packages
+	NOTE: http://www.openwall.com/lists/oss-security/2017/02/18/1
 CVE-2017-6058 [net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping]
 	RESERVED
 	- qemu <unfixed>