[Git][security-tracker-team/security-tracker][master] Update tracking for CVE-2018-17229 and CVE-2018-17230 in exiv2

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
db442333 by Salvatore Bonaccorso at 2020-01-31T13:43:51+01:00
Update tracking for CVE-2018-17229 and CVE-2018-17230 in exiv2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82023,8 +82023,7 @@ CVE-2018-17231 (** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allo
 	- telegram-desktop <unfixed> (unimportant)
 	NOTE: Disputed as attack scenario does not cross a privilege boundary.
 CVE-2018-17230 (Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to  ...)
-	[experimental] - exiv2 <unfixed>
-	- exiv2 <not-affected> (Vulnerable code introduced later)
+	- exiv2 <not-affected> (Vulnerable code introduced later; only affected experimental)
 	NOTE: https://github.com/Exiv2/exiv2/issues/455
 	NOTE: Introduced in: https://github.com/Exiv2/exiv2/commit/3d57bbc6e6036723df3c7da352e40267c90d1640
 	NOTE: Fixed by: https://github.com/Exiv2/exiv2/commit/afb98cbc6e288dc8ea75f3394a347fb9b37abc55
@@ -82032,8 +82031,7 @@ CVE-2018-17230 (Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attacke
 	NOTE: experimental, as the commit afb98cbc6e288dc8ea75f3394a347fb9b37abc55
 	NOTE: would introduce/uncover CVE-2018-17282.
 CVE-2018-17229 (Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to c ...)
-	[experimental] - exiv2 <unfixed>
-	- exiv2 <not-affected> (Vulnerable code introduced later)
+	- exiv2 <not-affected> (Vulnerable code introduced later; only affected experimental)
 	NOTE: https://github.com/Exiv2/exiv2/issues/453
 	NOTE: Introduced in: https://github.com/Exiv2/exiv2/commit/3d57bbc6e6036723df3c7da352e40267c90d1640
 	NOTE: Fixed by: https://github.com/Exiv2/exiv2/commit/afb98cbc6e288dc8ea75f3394a347fb9b37abc55



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/db442333d101118d29033caaf5fafda843524eca

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/db442333d101118d29033caaf5fafda843524eca
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200131/c2fe753b/attachment-0001.html>