[Secure-testing-commits] r53169 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-04 16:14:53 +0000 (Tue, 04 Jul 2017)
New Revision: 53169

Modified:
   data/CVE/list
Log:
pspp plain bugs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-04 14:33:10 UTC (rev 53168)
+++ data/CVE/list	2017-07-04 16:14:53 UTC (rev 53169)
@@ -42,15 +42,13 @@
 CVE-2017-10793
 	RESERVED
 CVE-2017-10792 (There is a NULL Pointer Dereference in the function ll_insert() of the ...)
-	- pspp <unfixed> (bug #866890)
-	[jessie] - pspp <no-dsa> (Minor issue)
-	[stretch] - pspp <no-dsa> (Minor issue)
+	- pspp <unfixed> (unimportant; bug #866890)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1467005
+	NOTE: No security impact, crash in CLI tool
 CVE-2017-10791 (There is an Integer overflow in the hash_int function of the libpspp ...)
-	- pspp <unfixed> (bug #866890)
-	[jessie] - pspp <no-dsa> (Minor issue)
-	[stretch] - pspp <no-dsa> (Minor issue)
+	- pspp <unfixed> (unimportant; bug #866890)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1467004
+	NOTE: No security impact as built in Debian
 CVE-2017-10790 (The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes ...)
 	- libtasn1-6 <unfixed>
 	- libtasn1-3 <removed>