Author: carnil Date: 2017-08-07 09:19:33 +0000 (Mon, 07 Aug 2017) New Revision: 54380
Modified: data/CVE/list Log: Add CVE-2017-6419/libmspack Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-08-07 09:17:58 UTC (rev 54379) +++ data/CVE/list 2017-08-07 09:19:33 UTC (rev 54380) @@ -17543,7 +17543,14 @@ NOTE: https://bugzilla.clamav.net/show_bug.cgi?id=11798 NOTE: https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc CVE-2017-6419 (mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows ...) - TODO: check + - libmspack <unfixed> + - clamav <unfixed> (unimportant) + NOTE: https://bugzilla.clamav.net/show_bug.cgi?id=11701 + NOTE: https://github.com/vrtadmin/clamav-devel/commit/a83773682e856ad6529ba6db8d1792e6d515d7f1 + NOTE: ClamAV uses the libmspack system library when available. This is the + NOTE: case from starting from Debian Jessie. Debian Wheezy does not have + NOTE: does not have libmspack and thus need to have the fix as well in the + NOTE: src:clamav source package. CVE-2017-6418 (libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a ...) TODO: check CVE-2017-6417 (Code injection vulnerability in Avira Total Security Suite 15.0 (and ...) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits