[Secure-testing-commits] r56682 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-14 05:13:46 +0000 (Sat, 14 Oct 2017)
New Revision: 56682

Modified:
   data/CVE/list
Log:
libgig issues fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-13 21:22:52 UTC (rev 56681)
+++ data/CVE/list	2017-10-14 05:13:46 UTC (rev 56682)
@@ -6238,7 +6238,7 @@
 	NOTE: Not reproducible in wheezy/jessie/stretch/sid(0.25-3.1) => "The memory contains data of an unknown image type"
 	NOTE: Reproducible in experimental (0.26-1).
 CVE-2017-12954 (The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig ...)
-	- libgig <unfixed> (low; bug #877652)
+	- libgig 4.0.0-5 (low; bug #877652)
 	[stretch] - libgig <no-dsa> (Minor issue)
 	[jessie] - libgig <no-dsa> (Minor issue)
 	[wheezy] - libgig <no-dsa> (Minor issue)
@@ -6259,7 +6259,7 @@
 	NOTE: http://seclists.org/fulldisclosure/2017/Aug/39 (provides repoducer files)
 	NOTE: http://svn.linuxsampler.org/cgi-bin/viewvc.cgi?view=revision&revision=3348
 CVE-2017-12951 (The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in ...)
-	- libgig <unfixed> (low; bug #877651)
+	- libgig 4.0.0-5 (low; bug #877651)
 	[stretch] - libgig <no-dsa> (Minor issue)
 	[jessie] - libgig <no-dsa> (Minor issue)
 	[wheezy] - libgig <no-dsa> (Minor issue)