[Secure-testing-commits] r52513 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-06-12 16:19:43 +0000 (Mon, 12 Jun 2017)
New Revision: 52513

Modified:
   data/CVE/list
Log:
libcroco bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-12 16:18:32 UTC (rev 52512)
+++ data/CVE/list	2017-06-12 16:19:43 UTC (rev 52513)
@@ -2058,7 +2058,7 @@
 	[wheezy] - libxml2 <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=775200
 CVE-2017-8871 (The cr_parser_parse_selector_core function in cr-parser.c in libcroco ...)
-	- libcroco <unfixed> (low)
+	- libcroco <unfixed> (bug #864666; low)
 	[stretch] - libcroco <no-dsa> (Minor issue)
 	[jessie] - libcroco <no-dsa> (Minor issue)
 CVE-2017-8870
@@ -2180,7 +2180,7 @@
 	[jessie] - lxterminal <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://git.lxde.org/gitweb/?p=lxde/lxterminal.git;a=commit;h=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648
 CVE-2017-8834 (The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 ...)
-	- libcroco <unfixed> (low)
+	- libcroco <unfixed> (bug #864666; low)
 	[stretch] - libcroco <no-dsa> (Minor issue)
 	[jessie] - libcroco <no-dsa> (Minor issue)
 CVE-2017-8833 (Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: ...)