[Secure-testing-commits] r52524 - data/CVE

[Chris Lamb]

Author: lamby
Date: 2017-06-13 01:56:06 +0000 (Tue, 13 Jun 2017)
New Revision: 52524

Modified:
   data/CVE/list
Log:
mark libcroco in wheezy as not-affected; the PoC do not trigger bug

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-12 21:10:13 UTC (rev 52523)
+++ data/CVE/list	2017-06-13 01:56:06 UTC (rev 52524)
@@ -2178,6 +2178,7 @@
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=775200
 CVE-2017-8871 (The cr_parser_parse_selector_core function in cr-parser.c in libcroco ...)
 	- libcroco <unfixed> (bug #864666; low)
+	[wheezy] - libcroco <not-affected> (Vulnerable code not present)
 	[stretch] - libcroco <no-dsa> (Minor issue)
 	[jessie] - libcroco <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=782649
@@ -2301,6 +2302,7 @@
 	NOTE: Fixed by: https://git.lxde.org/gitweb/?p=lxde/lxterminal.git;a=commit;h=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648
 CVE-2017-8834 (The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 ...)
 	- libcroco <unfixed> (bug #864666; low)
+	[wheezy] - libcroco <not-affected> (Vulnerable code not present)
 	[stretch] - libcroco <no-dsa> (Minor issue)
 	[jessie] - libcroco <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=782647