[Secure-testing-commits] r53131 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-02 20:19:13 +0000 (Sun, 02 Jul 2017)
New Revision: 53131

Modified:
   data/CVE/list
Log:
libsass no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-02 19:39:55 UTC (rev 53130)
+++ data/CVE/list	2017-07-02 20:19:13 UTC (rev 53131)
@@ -228,7 +228,8 @@
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2712
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/6173a57d39e04d68b139f8c1aa499a24dbe74ba1
 CVE-2017-10687 (In LibSass 3.4.5, there is a heap-based buffer over-read in the ...)
-	- libsass <unfixed> (bug #866672)
+	- libsass <unfixed> (low; bug #866672)
+	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1466411
 CVE-2017-10686 (In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after ...)
 	- nasm <unfixed>