[Git][security-tracker-team/security-tracker][master] Add CVE-2019-17007/nss

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62fa21c1 by Salvatore Bonaccorso at 2019-11-29T08:57:54Z
Add CVE-2019-17007/nss

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9105,8 +9105,14 @@ CVE-2019-17009
 	RESERVED
 CVE-2019-17008
 	RESERVED
-CVE-2019-17007
+CVE-2019-17007 [Bug 1703979 (CVE-2019-17007) - CVE-2019-17007 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS]
 	RESERVED
+	- nss 2:3.45-1
+	NOTE: https://bugs.chromium.org/p/project-zero/issues/detail?id=1798
+	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1533216
+	NOTE: https://hg.mozilla.org/projects/nss/rev/1473dd7efe2ce4f8722a33ebb03a3425e09887de
+	NOTE: Fixed in 3.44 upstream (and there was an upload of 3.44 to unstable
+	NOTE: but then reverted until the 2:3.45-1 upload).
 CVE-2019-17006
 	RESERVED
 CVE-2019-17005



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/62fa21c1ef1c3dfe6e26e226d5c8ccf33240ce33

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/62fa21c1ef1c3dfe6e26e226d5c8ccf33240ce33
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191129/edd3a6ab/attachment.html>