[Secure-testing-commits] r52338 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-06-05 20:49:27 +0000 (Mon, 05 Jun 2017)
New Revision: 52338

Modified:
   data/CVE/list
Log:
exiv2 fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-05 18:19:51 UTC (rev 52337)
+++ data/CVE/list	2017-06-05 20:49:27 UTC (rev 52338)
@@ -680,7 +680,7 @@
 	NOTE: https://github.com/fbb-git/yodl/commit/fd85f8c94182558ff1480d06a236d6fb927979a3
 CVE-2017-9239 (An issue was discovered in Exiv2 0.26. When the data structure of the ...)
 	{DLA-963-1}
-	- exiv2 <unfixed> (bug #863410)
+	- exiv2 0.25-3.1 (bug #863410)
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: http://dev.exiv2.org/issues/1296
 	NOTE: fix: https://github.com/Exiv2/exiv2/commit/2f8681e120d277e418941c4361c83b5028f67fd8
@@ -10186,7 +10186,7 @@
 	[jessie] - yara 3.1.0-2+deb8u1
 	NOTE: https://github.com/VirusTotal/yara/issues/576
 CVE-2016-10209 (The archive_wstring_append_from_mbs function in archive_string.c in ...)
-	- libarchive <unfixed> (bug #859456)
+	- libarchive <unfixed> (low; bug #859456)
 	[stretch] - libarchive <no-dsa> (Minor issue)
 	[jessie] - libarchive <no-dsa> (Minor issue)
 	[wheezy] - libarchive <no-dsa> (Minor issue, not reproducible in Debian)