[Secure-testing-commits] r48586 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-31 06:07:22 +0000 (Tue, 31 Jan 2017)
New Revision: 48586

Modified:
   data/CVE/list
Log:
Triage CVE-2017-5601/libarchive

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-31 05:45:51 UTC (rev 48585)
+++ data/CVE/list	2017-01-31 06:07:22 UTC (rev 48586)
@@ -101,7 +101,9 @@
 CVE-2017-5602
 	RESERVED
 CVE-2017-5601 (An error in the lha_read_file_header_1() function ...)
-	TODO: check
+	- libarchive <unfixed> (bug #853278)
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/98dcbbf0bf4854bf987557e55e55fff7abbf3ea9
+	NOTE: https://secunia.com/secunia_research/2017-3/
 CVE-2016-10186 (An issue was discovered on the D-Link DWR-932B router. ...)
 	TODO: check
 CVE-2016-10185 (An issue was discovered on the D-Link DWR-932B router. A secure_mode=no ...)