[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2017-1000430 as NFU

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a1118c45 by Salvatore Bonaccorso at 2018-01-13T20:51:53+01:00
Mark CVE-2017-1000430 as NFU

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4052,7 +4052,8 @@ CVE-2017-1000442 (Passbolt API version 1.6.4 and older are vulnerable to a XSS i
 CVE-2017-1000431 (eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is ...)
 	NOT-FOR-US: eZ Systems eZ Publish
 CVE-2017-1000430 (rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when ...)
-	TODO: check
+	NOTE: https://github.com/RustSec/advisory-db/blob/master/crates/base64/RUSTSEC-2017-0004.toml
+	NOT-FOR-US: rust-base64
 CVE-2017-1000424 (Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable ...)
 	- electron <itp> (bug #842420)
 CVE-2017-1000423 (b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a1118c459b70e81e9bdcaf80405add4a342ef640

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a1118c459b70e81e9bdcaf80405add4a342ef640
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180113/7ac1f026/attachment-0001.html>