Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b70cb4f0 by Moritz Muehlenhoff at 2018-06-05T23:42:44+02:00
one glibc issue turned out to be a non-issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -57921,16 +57921,11 @@ CVE-2017-8829 (Deserialization vulnerability in
lintian through 2.5.50.3 allows
[jessie] - lintian <not-affected> (upstream/metadata check introduced
in 2.5.41; vulnerable code not present)
[wheezy] - lintian <not-affected> (upstream/metadata check introduced
in 2.5.41; vulnerable code not present)
CVE-2017-8804 (The xdr_bytes and xdr_string functions in the GNU C Library
(aka glibc ...)
- - glibc <unfixed> (bug #862086)
- [stretch] - glibc <no-dsa> (Can be fixed in a point update)
- [jessie] - glibc <no-dsa> (Can be fixed in a point update)
- - eglibc <removed>
- [wheezy] - eglibc <no-dsa> (Can be fixed later)
+ NOTE: This is not a vulnerability in glibc, but a bug in the
application, see
+ NOTE: https://sourceware.org/ml/libc-alpha/2017-05/msg00128.html and
+ NOTE: https://sourceware.org/ml/libc-alpha/2017-05/msg00129.html
NOTE: http://www.openwall.com/lists/oss-security/2017/05/05/2
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21461
- NOTE: https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html
- NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7
- NOTE: Proposed patch:
https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html
CVE-2017-8803 (Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might
allow ...)
NOT-FOR-US: Notepad++
CVE-2017-8802 (Cross-site scripting (XSS) vulnerability in Zimbra
Collaboration Suite ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b70cb4f0245a52cd189ac094d958f084b3e3ed4b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b70cb4f0245a52cd189ac094d958f084b3e3ed4b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
