[Secure-testing-commits] r57473 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Nov 8 21:47:21 UTC 2017


Author: carnil
Date: 2017-11-08 21:47:21 +0000 (Wed, 08 Nov 2017)
New Revision: 57473

Modified:
   data/CVE/list
Log:
Reference CVE-2017-1000383 upstream report

Depending on how Emacs upstream decide we might readd the individual
source packages, but rather with unimportant severity?

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-08 21:41:41 UTC (rev 57472)
+++ data/CVE/list	2017-11-08 21:47:21 UTC (rev 57473)
@@ -1000,6 +1000,7 @@
 CVE-2017-1000383 (GNU Emacs version 25.3.1 (and other versions most likely) ignores ...)
 	NOTE: This CVE assignment is nonsense, GNU emacs reuses the umask of the original
 	NOTE: file when creating a backup file. That's hardly incorrect behaviour
+	NOTE: Upstream report: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=29182
 CVE-2017-1000382 (VIM version 8.0.1187 (and other versions most likely) ignores umask ...)
 	- vim <unfixed>
 	[stretch] - vim <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list