[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update information on CVE-2017-837{2, 3}/libmad

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
00d951de by Salvatore Bonaccorso at 2018-01-28T22:40:50+01:00
Update information on CVE-2017-837{2,3}/libmad

The originally applied patch only covered the real underlying issue,
which got now fixed with a patch written by Kurt and applied in
0.15.1b-9.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -42464,14 +42464,16 @@ CVE-2017-8374 (The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b
 	- libmad 0.15.1b-4
 	NOTE: Addressed by patch from #508133
 CVE-2017-8373 (The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b ...)
-	- libmad 0.15.1b-4
-	NOTE: Addressed by patch from #508133
-	NOTE: Duplicate with CVE-2017-8372
+	- libmad 0.15.1b-9 (bug #287519)
+	NOTE: Addressed/Covered by patch from #508133
+	NOTE: The patch applied in 0.15.1b-4 only covered the actual issue
+	NOTE: "Duplicate with"/basically same as CVE-2017-8372
 CVE-2017-8372 (The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, ...)
-	- libmad 0.15.1b-4 (unimportant)
+	- libmad 0.15.1b-9 (bug #287519)
 	NOTE: https://blogs.gentoo.org/ago/2017/04/30/libmad-assertion-failure-in-layer3-c/
-	NOTE: Addressed by patch from #508133
-	NOTE: Duplicate with CVE-2017-8373
+	NOTE: Addressed/Covered by patch from #508133
+	NOTE: The patch applied in 0.15.1b-4 only covered the actual issue
+	NOTE: "Duplicate" with/basically same as CVE-2017-8373
 CVE-2017-8371 (Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses ...)
 	NOT-FOR-US: Schneider Electric
 CVE-2017-8370 (IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows remote ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/00d951de4ab2f295b176f32b864b226db0a80039

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/00d951de4ab2f295b176f32b864b226db0a80039
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180128/c41737c6/attachment.html>