[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update information for CVE-2016-2541

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91a58716 by Salvatore Bonaccorso at 2018-02-11T10:16:56+01:00
Update information for CVE-2016-2541

Mark jessie as not-affected as the embedded source copy is not contained
in 2.0.6 (yet).

Mark with severity unimportant as audacity does not use the embedded
copy but the system library.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -91342,7 +91342,8 @@ CVE-2016-3171 (Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x b
 	NOTE: https://www.drupal.org/SA-CORE-2016-001
 	NOTE: http://www.openwall.com/lists/oss-security/2016/02/24/19
 CVE-2016-2541 (Audacity before 2.1.2 allows remote attackers to cause a denial of ...)
-	- audacity 2.1.2-1
+	- audacity 2.1.2-1 (unimportant)
+	[jessie] - audacity <not-affected> (Vulnerable code not present)
 	[wheezy] - audacity <not-affected> (vulnerable code not present)
 	NOTE: http://wiki.audacityteam.org/wiki/Release_Notes_2.1.2
 	NOTE: https://github.com/audacity/audacity/commit/85026f98958a8dcc09188be24a8db0385988e23f



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91a5871631e5476eee00d5f266a462df41146d41

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91a5871631e5476eee00d5f266a462df41146d41
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180211/67dfb086/attachment.html>