[Git][security-tracker-team/security-tracker][master] Update tracking for issues for exiv2 tracked in #868578

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9264ba33 by Salvatore Bonaccorso at 2020-01-30T13:02:40+01:00
Update tracking for issues for exiv2 tracked in #868578

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -148079,37 +148079,32 @@ CVE-2017-11341 (There is a heap based buffer over-read in lexer.hpp of LibSass 3
 	- libsass <undetermined> (bug #868577)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470714
 CVE-2017-11340 (There is a Segmentation fault in the XmpParser::terminate() function i ...)
-	[experimental] - exiv2 <unfixed> (low; bug #868578)
-	- exiv2 <not-affected> (Vulnerable code introduced later)
+	- exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
 	NOTE: https://github.com/Exiv2/exiv2/issues/53
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470950
 	NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type".
 	NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
 CVE-2017-11339 (There is a heap-based buffer overflow in the Image::printIFDStructure  ...)
-	[experimental] - exiv2 <unfixed> (bug #868578)
-	- exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+	- exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
 	NOTE: https://github.com/Exiv2/exiv2/issues/52
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470946
 	NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type".
 	NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
 CVE-2017-11338 (There is an infinite loop in the Exiv2::Image::printIFDStructure funct ...)
-	[experimental] - exiv2 <unfixed> (low; bug #868578)
-	- exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+	- exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
 	NOTE: https://github.com/Exiv2/exiv2/issues/51
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470913
 	NOTE: Not reproducible in wheezy/jessie/stretch, I get "No Exif data found in the file".
 	NOTE: Reproducible with 0.26-1 (experimental).
 CVE-2017-11337 (There is an invalid free in the Action::TaskFactory::cleanup function  ...)
-	[experimental] - exiv2 <unfixed> (low; bug #868578)
-	- exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+	- exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
 	NOTE: https://github.com/Exiv2/exiv2/issues/50
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470737
 	NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind), I get "No Exif data found in the file".
 	NOTE: Reproducible with 0.26-1 (experimental).
 	NOTE: Action::TaskFactory::cleanup function is the same in all versions, so the problem is likely an earlier memory corruption.
 CVE-2017-11336 (There is a heap-based buffer over-read in the Image::printIFDStructure ...)
-	[experimental] - exiv2 <unfixed> (bug #868578)
-	- exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+	- exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
 	NOTE: https://github.com/Exiv2/exiv2/issues/49
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470729
 	NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind).



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9264ba33acff01c4a3f06f29433d4a200902a643

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9264ba33acff01c4a3f06f29433d4a200902a643
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200130/59953855/attachment.html>