[Secure-testing-commits] r51921 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-05-24 09:12:17 +0000 (Wed, 24 May 2017)
New Revision: 51921

Modified:
   data/CVE/list
Log:
kodi CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-24 09:10:13 UTC (rev 51920)
+++ data/CVE/list	2017-05-24 09:12:17 UTC (rev 51921)
@@ -2,11 +2,6 @@
 	TODO: check
 CVE-2017-9216 (libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and ...)
 	TODO: check
-CVE-2017-XXXX [kodi: directory traversal in ZipManager]
-	- kodi <unfixed> (bug #863230)
-	- xbmc <undetermined>
-	NOTE: http://blog.checkpoint.com/2017/05/23/hacked-in-translation/
-	NOTE: https://kodi.tv/article/kodi-v172-minor-bug-fix-and-security-release
 CVE-2017-9215
 	RESERVED
 CVE-2017-9214 (In Open vSwitch (OvS) 2.7.0, while parsing an ...)
@@ -2256,7 +2251,10 @@
 CVE-2017-8315
 	RESERVED
 CVE-2017-8314 (Directory Traversal in Zip Extraction built-in function in Kodi 17.1 ...)
-	TODO: check
+	- kodi <unfixed> (bug #863230)
+	- xbmc <undetermined>
+	NOTE: http://blog.checkpoint.com/2017/05/23/hacked-in-translation/
+	NOTE: https://kodi.tv/article/kodi-v172-minor-bug-fix-and-security-release
 CVE-2017-8313 (Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to ...)
 	TODO: check
 CVE-2017-8312 (Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing ...)