[Secure-testing-commits] r53412 - data/CVE

[Raphael Geissert]

Author: atomo64-guest
Date: 2017-07-12 12:59:38 +0000 (Wed, 12 Jul 2017)
New Revision: 53412

Modified:
   data/CVE/list
Log:
samba is also affected by CVE-2017-11103


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-12 10:51:07 UTC (rev 53411)
+++ data/CVE/list	2017-07-12 12:59:38 UTC (rev 53412)
@@ -384,8 +384,11 @@
 CVE-2017-11103
 	RESERVED
 	- heimdal <unfixed>
+	- samba <unfixed>
 	NOTE: https://orpheus-lyre.info/
 	NOTE: https://github.com/heimdal/heimdal/commit/6dd3eb836bbb80a00ffced4ad57077a1cdf227ea
+	NOTE: samba's source package embeds heimdal but the binary is statically linked to src:heimdal
+	NOTE: https://www.samba.org/samba/security/CVE-2017-11103.html
 CVE-2017-11102 (The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 ...)
 	- graphicsmagick 1.3.26-2 (bug #867746)
 	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/d445af60a8d5