[Secure-testing-commits] r51314 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-05-03 19:57:33 +0000 (Wed, 03 May 2017)
New Revision: 51314

Modified:
   data/CVE/list
Log:
Update information for CVE-2017-8358/libreoffice

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-03 18:29:13 UTC (rev 51313)
+++ data/CVE/list	2017-05-03 19:57:33 UTC (rev 51314)
@@ -282,8 +282,9 @@
 	- grpc <unfixed>
 	NOTE: https://github.com/grpc/grpc/pull/10353
 CVE-2017-8358 (LibreOffice before 2017-03-17 has an out-of-bounds write caused by a ...)
-	- libreoffice <undetermined>
-	NOTE: https://github.com/LibreOffice/core/commit/6e6e54f944a5ebb49e9110bdeff844d00a96c56c
+	- libreoffice <not-affected> (Vulnerable code introduced on 2017-03-15; never in released version)
+	NOTE: Fixed by: https://github.com/LibreOffice/core/commit/6e6e54f944a5ebb49e9110bdeff844d00a96c56c
+	NOTE: Introduced by: https://github.com/LibreOffice/core/commit/ceb53ad9f34ae05d09f61845d581546eac0c6d60
 CVE-2017-8357 (In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows ...)
 	- imagemagick <unfixed>
 	[jessie] - imagemagick <no-dsa> (Can be postponed until more severe issue are around)