Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
be85804b by Moritz Muehlenhoff at 2019-01-04T22:13:45Z
abiword non issue after further inspection
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63332,16 +63332,8 @@ CVE-2017-17530 (common/help.c in Geomview 1.9.5 does
not validate strings before
- geomview <unfixed> (unimportant)
NOTE:
https://sources.debian.org/src/geomview/1.9.5-1/src/bin/geomview/common/help.c/?hl=51#L83
CVE-2017-17529 (af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate
strings ...)
- - abiword 3.0.2-6 (low; bug #884923)
- [stretch] - abiword <no-dsa> (Minor issue)
- [jessie] - abiword <no-dsa> (Minor issue)
- [wheezy] - abiword <no-dsa> (Minor issue)
- NOTE:
https://sources.debian.org/src/abiword/3.0.2-5/src/af/util/xp/ut_go_file.cpp/#L1717
- NOTE: Issue could be mitigated (when using GTK+-2) by compiling abiword
with
- NOTE: --with-gnomevfs so that abiword does not use the problematic
fallback_open_uri.
- NOTE: Abiword in Debian is compiled against GTK+3+, and thus the
fallback_open_uri()
- NOTE: function is used, despite the passed flag --with-gnomevfs was
added in 3.0.2-6.
- NOTE: See explanation in https://bugs.debian.org/884923#15
+ - abiword <unfixed> (unimportant; bug #884923)
+ NOTE: Non-issue, nothing exploitable, should be rejected
CVE-2017-17528 (backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does
not ...)
- scummvm <unfixed> (unimportant)
[wheezy] - scummvm <not-affected> (Vulnerable code not there)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/be85804bb0ea2700dbb53725875734f7eb192897
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/be85804bb0ea2700dbb53725875734f7eb192897
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
