Author: geissert
Date: 2017-08-08 20:27:17 +0000 (Tue, 08 Aug 2017)
New Revision: 54453
Modified:
data/CVE/list
Log:
silverjuke appears to embed/have forked taglib
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-08-08 20:17:13 UTC (rev 54452)
+++ data/CVE/list 2017-08-08 20:27:17 UTC (rev 54453)
@@ -3,6 +3,8 @@
[stretch] - taglib <no-dsa> (Minor issue)
[jessie] - taglib <not-affected> (Vulnerable code not present)
[wheezy] - taglib <not-affected> (Vulnerable code not present)
+ - silverjuke <unfixed>
+ TODO: check silverjuke
NOTE: https://github.com/taglib/taglib/issues/829
NOTE:
https://github.com/taglib/taglib/pull/831/commits/eb9ded1206f18f2c319157337edea2533a40bea6#diff-37f706c8696a7c1ca939b169c0a04d97
CVE-2017-12677 (IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS
in an ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
