[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add note about introducing changeset for CVE-2017-17484
Salvatore Bonaccorso
carnil at debian.org
Tue Jan 2 19:38:02 UTC 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a912c980 by Salvatore Bonaccorso at 2018-01-02T20:36:51+01:00
Add note about introducing changeset for CVE-2017-17484
The issue is likely be introduced by the upstream change
https://ssl.icu-project.org/trac/changeset/40455/trunk/icu4c/source/common/ucnv_u8.cpp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -6515,6 +6515,7 @@ CVE-2017-17484 (The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International .
NOTE: Fixed by: https://ssl.icu-project.org/trac/changeset/40714
NOTE: Testcase: https://ssl.icu-project.org/trac/changeset/40715
NOTE: POC: https://ssl.icu-project.org/trac/attachment/ticket/13490/poc.cpp
+ NOTE: Likely introduced by: https://ssl.icu-project.org/trac/changeset/40455/trunk/icu4c/source/common/ucnv_u8.cpp
CVE-2017-17483
RESERVED
CVE-2017-17482
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a912c98040564090e3791192eeee33614ca188d5
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a912c98040564090e3791192eeee33614ca188d5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180102/43828b5a/attachment.html>
More information about the Secure-testing-commits
mailing list