[Secure-testing-commits] r53554 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-16 20:46:43 +0000 (Sun, 16 Jul 2017)
New Revision: 53554

Modified:
   data/CVE/list
Log:
new libsass issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-16 20:39:25 UTC (rev 53553)
+++ data/CVE/list	2017-07-16 20:46:43 UTC (rev 53554)
@@ -2,9 +2,13 @@
 	- yadm <unfixed> (bug #868300)
 	NOTE: https://github.com/TheLocehiliosan/yadm/issues/74
 CVE-2017-11342 (There is an illegal address access in ast.cpp of LibSass 3.4.5. A ...)
-	TODO: check
+	- libsass <unfixed>
+	[stretch] - libsass <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470722
 CVE-2017-11341 (There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A ...)
-	TODO: check
+	- libsass <unfixed>
+	[stretch] - libsass <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470714
 CVE-2017-11340 (There is a Segmentation fault in the XmpParser::terminate() function in ...)
 	TODO: check
 CVE-2017-11339 (There is a heap-based buffer overflow in the Image::printIFDStructure ...)