[Secure-testing-commits] r53555 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-16 20:50:58 +0000 (Sun, 16 Jul 2017)
New Revision: 53555

Modified:
   data/CVE/list
Log:
new exiv2 issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-16 20:46:43 UTC (rev 53554)
+++ data/CVE/list	2017-07-16 20:50:58 UTC (rev 53555)
@@ -10,15 +10,30 @@
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470714
 CVE-2017-11340 (There is a Segmentation fault in the XmpParser::terminate() function in ...)
-	TODO: check
+	- exiv2 <unfixed>
+	[stretch] - exiv2 <no-dsa> (Minor issue)
+	[jessie] - exiv2 <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470950
 CVE-2017-11339 (There is a heap-based buffer overflow in the Image::printIFDStructure ...)
-	TODO: check
+	- exiv2 <unfixed>
+	[stretch] - exiv2 <no-dsa> (Minor issue)
+	[jessie] - exiv2 <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470946
 CVE-2017-11338 (There is an infinite loop in the Exiv2::Image::printIFDStructure ...)
-	TODO: check
+	- exiv2 <unfixed>
+	[stretch] - exiv2 <no-dsa> (Minor issue)
+	[jessie] - exiv2 <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470913
 CVE-2017-11337 (There is an invalid free in the Action::TaskFactory::cleanup function ...)
-	TODO: check
+	- exiv2 <unfixed>
+	[stretch] - exiv2 <no-dsa> (Minor issue)
+	[jessie] - exiv2 <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470737
 CVE-2017-11336 (There is a heap-based buffer over-read in the Image::printIFDStructure ...)
-	TODO: check
+	- exiv2 <unfixed>
+	[stretch] - exiv2 <no-dsa> (Minor issue)
+	[jessie] - exiv2 <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470729
 CVE-2017-11335 (There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF ...)
 	- tiff 4.0.8-4 (bug #868513)
 	[stretch] - tiff <no-dsa> (Minor issue)