[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] exiv2 n/a

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ee382ff by Moritz Muehlenhoff at 2018-02-21T17:25:20+01:00
exiv2 n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -10203,11 +10203,12 @@ CVE-2017-17723 (In Exiv2 0.26, there is a heap-based buffer over-read in the ...
 	NOTE: https://github.com/Exiv2/exiv2/issues/229
 	TODO: check
 CVE-2017-17722 (In Exiv2 0.26, there is a reachable assertion in the readHeader ...)
-	- exiv2 <undetermined>
-	[wheezy] - exiv2 <not-affected> (vulnerable code not present)
+	[experimental] - exiv2 <unfixed> (low)
+	- exiv2 <not-affected> (Vulnerable code introduced in 0.26)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1524116
-	NOTE: https://github.com/Exiv2/exiv2/issues/228
-	TODO: check
+	NOTE: https://github.com/Exiv2/exiv2/issues/208
+	NOTE: https://github.com/Exiv2/exiv2/issues/228 (duplicate)
+	NOTE: https://github.com/Kicer86/exiv2/commit/1647908e00a4df7246d76678e59587e62c690dcd
 CVE-2017-17721 (CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 ...)
 	NOT-FOR-US: ZUUSE BEIMS ContractorWeb .NET
 CVE-2017-17720



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0ee382ff466e6f2f9894d97ef45b7673d88aab52

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0ee382ff466e6f2f9894d97ef45b7673d88aab52
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180221/e4bd1b11/attachment.html>