[Git][security-tracker-team/security-tracker][master] mark libmad dupe, seems like an error at MITRE

Moritz Muehlenhoff jmm at debian.org
Mon Apr 30 23:18:55 BST 2018


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36057693 by Moritz Muehlenhoff at 2018-05-01T00:18:25+02:00
mark libmad dupe, seems like an error at MITRE

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -8509,11 +8509,7 @@ CVE-2004-2779 (id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b .
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=162647
 	NOTE: https://sources.debian.org/patches/libid3tag/0.15.1b-13/10_utf16.dpatch/
 CVE-2018-7263 (The mad_decoder_run() function in decoder.c in Underbit libmad through ...)
-	- libmad <unfixed>
-	NOTE: Possible overlap with CVE-2017-11552 and relates to the issue raised in
-	NOTE: https://bugs.debian.org/870608
-	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1081784
-	TODO: clarify with MITRE why this CVE was additionally assigned
+	NOTE: Seems like a duplicate of CVE-2017-11552
 CVE-2018-7262 (In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc ...)
 	- ceph <not-affected> (Issue introduced later)
 	NOTE: See details in https://bugs.debian.org/891963#15 . Ceph as present in



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/360576936d9e0dbfc93c3ff481a0c81ce45340f5

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/360576936d9e0dbfc93c3ff481a0c81ce45340f5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180430/1babb78b/attachment.html>


More information about the debian-security-tracker-commits mailing list