[Secure-testing-commits] r57800 - data/CVE

[Hugo Lefeuvre]

Author: hle
Date: 2017-11-18 22:04:16 +0000 (Sat, 18 Nov 2017)
New Revision: 57800

Modified:
   data/CVE/list
Log:
ming (removed, only in wheezy) is affected by new CVE-2017-16883 (more infos on upstreams bug tracker)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-18 21:10:12 UTC (rev 57799)
+++ data/CVE/list	2017-11-18 22:04:16 UTC (rev 57800)
@@ -1,5 +1,6 @@
 CVE-2017-16883 (The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= ...)
-	TODO: check
+	- ming <removed>
+	NOTE: https://github.com/libming/libming/issues/77
 CVE-2017-16882 (Icinga Core through 1.14.0 initially executes bin/icinga as root but ...)
 	TODO: check
 CVE-2017-16881 (b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON ...)