[Secure-testing-commits] r52103 - data/CVE

security tracker role sectracker at moszumanska.debian.org
Tue May 30 09:10:14 UTC 2017


Author: sectracker
Date: 2017-05-30 09:10:13 +0000 (Tue, 30 May 2017)
New Revision: 52103

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-30 07:11:05 UTC (rev 52102)
+++ data/CVE/list	2017-05-30 09:10:13 UTC (rev 52103)
@@ -1,3 +1,5 @@
+CVE-2017-9303 (Laravel 5.4.x before 5.4.22 does not properly constrain the host ...)
+	TODO: check
 CVE-2017-9302 (RealPlayer 16.0.2.32 allows remote attackers to cause a denial of ...)
 	NOT-FOR-US: RealPlayer
 CVE-2017-9301 (plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media ...)
@@ -159,6 +161,7 @@
 	NOTE: https://github.com/fbb-git/yodl/issues/1
 	NOTE: https://github.com/fbb-git/yodl/commit/fd85f8c94182558ff1480d06a236d6fb927979a3
 CVE-2017-9239 (An issue was discovered in Exiv2 0.26. When the data structure of the ...)
+	{DLA-963-1}
 	- exiv2 <unfixed> (bug #863410)
 	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: http://dev.exiv2.org/issues/1296




More information about the Secure-testing-commits mailing list