[Secure-testing-commits] r53269 - data/CVE

[Antoine Beaupré]

Author: anarcat
Date: 2017-07-08 00:47:18 +0000 (Sat, 08 Jul 2017)
New Revision: 53269

Modified:
   data/CVE/list
Log:
link to reduced patchset for libmtp issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-08 00:46:58 UTC (rev 53268)
+++ data/CVE/list	2017-07-08 00:47:18 UTC (rev 53269)
@@ -1547,11 +1547,13 @@
 	[jessie] - libmtp <no-dsa> (Minor issue; can be fixed in a point release)
 	NOTE: https://sourceforge.net/p/libmtp/mailman/message/35729062/
 	NOTE: https://sourceforge.net/p/libmtp/code/ci/aa7d91a789873a9d86969028e57f888a1241c085/
+	NOTE: reduced patchset: https://lists.debian.org/87lgnzvjvb.fsf@curie.anarc.at
 CVE-2017-9831 (An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx ...)
 	- libmtp 1.1.13-1
 	[jessie] - libmtp <no-dsa> (Minor issue; can be fixed in a point release)
 	NOTE: https://sourceforge.net/p/libmtp/mailman/message/35735992/
 	NOTE: https://sourceforge.net/p/libmtp/code/ci/aa7d91a789873a9d86969028e57f888a1241c085/
+	NOTE: reduced patchset: https://lists.debian.org/87lgnzvjvb.fsf@curie.anarc.at
 CVE-2017-9830 (Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the ...)
 	NOT-FOR-US: Code42
 CVE-2017-9829 ('/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the ...)