[Secure-testing-commits] r57836 - data/CVE

Emilio Pozuelo Monfort pochu at moszumanska.debian.org
Sun Nov 19 19:30:34 UTC 2017


Author: pochu
Date: 2017-11-19 19:30:34 +0000 (Sun, 19 Nov 2017)
New Revision: 57836

Modified:
   data/CVE/list
Log:
some xorg-server CVEs n/a on wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-19 19:24:14 UTC (rev 57835)
+++ data/CVE/list	2017-11-19 19:30:34 UTC (rev 57836)
@@ -9240,8 +9240,8 @@
 CVE-2017-13721 (In X.Org Server (aka xserver and xorg-server) before 1.19.4, an ...)
 	{DSA-4000-1}
 	- xorg-server 2:1.19.4-1
+	[wheezy] - xorg-server <not-affected> (Vulnerable code introduced later)
 	NOTE: https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1
-	NOTE: In wheezy this is possibly libxext, src/XShm.c?
 CVE-2017-13720 (In the PatternMatch function in fontfile/fontdir.c in libXfont through ...)
 	{DSA-3995-1 DLA-1126-1}
 	- libxfont 1:2.0.1-4
@@ -13713,6 +13713,7 @@
 	RESERVED
 	{DSA-4000-1}
 	- xorg-server 2:1.19.5-1
+	[wheezy] - xorg-server <not-affected> (Vulnerable code introduced later)
 	NOTE: https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e
 CVE-2017-12185
 	RESERVED
@@ -13738,6 +13739,7 @@
 	RESERVED
 	{DSA-4000-1}
 	- xorg-server 2:1.19.5-1
+	[wheezy] - xorg-server <not-affected> (Vulnerable code introduced later)
 	NOTE: https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b
 CVE-2017-12180 [hw/xfree86: unvalidated lengths]
 	RESERVED
@@ -13748,6 +13750,7 @@
 	RESERVED
 	{DSA-4000-1}
 	- xorg-server 2:1.19.5-1
+	[wheezy] - xorg-server <not-affected> (Vulnerable code introduced later)
 CVE-2017-12178 [Xi: fix wrong extra length check in ProcXIChangeHierarchy]
 	RESERVED
 	{DSA-4000-1}




More information about the Secure-testing-commits mailing list