Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
91e22def by Salvatore Bonaccorso at 2018-01-01T14:59:07+01:00
Add CVE-2017-17669/exiv2, checked and issue present in 0.24-1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -5924,9 +5924,8 @@ CVE-2017-17670 (In VideoLAN VLC media player through
2.2.8, there is a type conv
NOTE: http://www.openwall.com/lists/oss-security/2017/12/15/1
NOTE: POC:
https://gist.github.com/dyntopia/194d912287656f66dd502158b0cd2e68
CVE-2017-17669 (There is a heap-based buffer over-read in the ...)
- - exiv2 <undetermined>
+ - exiv2 <unfixed>
NOTE: https://github.com/Exiv2/exiv2/issues/187
- TODO: check
CVE-2017-17668
RESERVED
CVE-2017-17667
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/91e22defc4153f0ac9d91169ab2a4ac37fa283a5
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/91e22defc4153f0ac9d91169ab2a4ac37fa283a5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
