[Secure-testing-commits] r56620 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-11 20:57:38 +0000 (Wed, 11 Oct 2017)
New Revision: 56620

Modified:
   data/CVE/list
Log:
Update information for CVE-2017-2888

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-11 20:40:49 UTC (rev 56619)
+++ data/CVE/list	2017-10-11 20:57:38 UTC (rev 56620)
@@ -36749,8 +36749,9 @@
 CVE-2017-2888 [Simple DirectMedia Layer Create RGB Surface Code Execution Vulnerability]
 	RESERVED
 	- libsdl2 <unfixed>
-	- libsdl1.2 <undetermined>
+	- libsdl1.2 <not-affected> (Issue not present, SDL_CreateRGBSurface contains further check for too large width or height)
 	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395
+	NOTE: https://hg.libsdl.org/SDL/rev/7e0f1498ddb5
 CVE-2017-2887 [Simple DirectMedia Layer SDL_image XCF Property Handling Code Execution Vulnerability]
 	RESERVED
 	- libsdl2 <unfixed>