[Git][security-tracker-team/security-tracker][master] Reference upstream discussion for CVE-2017-1154{6,7,9}/timidity

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
33b2ea5c by Salvatore Bonaccorso at 2018-06-10T09:23:11+02:00
Reference upstream discussion for CVE-2017-1154{6,7,9}/timidity

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -50167,6 +50167,7 @@ CVE-2017-11550 (The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allo
 CVE-2017-11549 (The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote ...)
 	- timidity <unfixed> (unimportant; bug #870338)
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/83
+	NOTE: https://sourceforge.net/p/timidity/discussion/217458/thread/9a1c9620/
 	NOTE: Crash in CLI tool, no security impact
 CVE-2017-11548 (The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 ...)
 	- libao <unfixed> (low; bug #870608)
@@ -50177,10 +50178,12 @@ CVE-2017-11548 (The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1
 CVE-2017-11547 (The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows ...)
 	- timidity <unfixed> (unimportant; bug #870338)
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/83
+	NOTE: https://sourceforge.net/p/timidity/discussion/217458/thread/9a1c9620/
 	NOTE: Crash in CLI tool, no security impact
 CVE-2017-11546 (The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 ...)
 	- timidity <unfixed> (unimportant; bug #870338)
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/83
+	NOTE: https://sourceforge.net/p/timidity/discussion/217458/thread/9a1c9620/
 	NOTE: Crash in CLI tool, no security impact
 CVE-2017-11545
 	REJECTED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/33b2ea5c044ac1887ad04c0b65bbf82ebfadf510

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/33b2ea5c044ac1887ad04c0b65bbf82ebfadf510
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180610/20ba3352/attachment.html>