[Git][security-tracker-team/security-tracker][master] one glibc issue turned out to be a non-issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b70cb4f0 by Moritz Muehlenhoff at 2018-06-05T23:42:44+02:00
one glibc issue turned out to be a non-issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -57921,16 +57921,11 @@ CVE-2017-8829 (Deserialization vulnerability in lintian through 2.5.50.3 allows 
 	[jessie] - lintian <not-affected> (upstream/metadata check introduced in 2.5.41; vulnerable code not present)
 	[wheezy] - lintian <not-affected> (upstream/metadata check introduced in 2.5.41; vulnerable code not present)
 CVE-2017-8804 (The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc ...)
-	- glibc <unfixed> (bug #862086)
-	[stretch] - glibc <no-dsa> (Can be fixed in a point update)
-	[jessie] - glibc <no-dsa> (Can be fixed in a point update)
-	- eglibc <removed>
-	[wheezy] - eglibc <no-dsa> (Can be fixed later)
+	NOTE: This is not a vulnerability in glibc, but a bug in the application, see
+	NOTE: https://sourceware.org/ml/libc-alpha/2017-05/msg00128.html and 
+	NOTE: https://sourceware.org/ml/libc-alpha/2017-05/msg00129.html
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/05/2
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21461
-	NOTE: https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html
-	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7
-	NOTE: Proposed patch: https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html
 CVE-2017-8803 (Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow ...)
 	NOT-FOR-US: Notepad++
 CVE-2017-8802 (Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b70cb4f0245a52cd189ac094d958f084b3e3ed4b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b70cb4f0245a52cd189ac094d958f084b3e3ed4b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180605/63a1013b/attachment.html>