Author: carnil
Date: 2017-07-08 21:22:53 +0000 (Sat, 08 Jul 2017)
New Revision: 53297
Modified:
data/CVE/list
Log:
Four ncurses issues fixed upstream with the 20170701 patchlevel
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-07-08 21:17:44 UTC (rev 53296)
+++ data/CVE/list 2017-07-08 21:22:53 UTC (rev 53297)
@@ -1,8 +1,8 @@
CVE-2017-11113 (In ncurses 6.0, there is a NULL Pointer Dereference in the ...)
- - ncurses <unfixed>
+ - ncurses 6.0+20170701-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1464691
CVE-2017-11112 (In ncurses 6.0, there is an attempted 0xffffffffffffffff
access in the ...)
- - ncurses <unfixed>
+ - ncurses 6.0+20170701-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1464686
CVE-2017-11111 (In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote
attackers ...)
TODO: check
@@ -966,10 +966,10 @@
- nasm <unfixed>
NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392414
CVE-2017-10685 (In ncurses 6.0, there is a format string vulnerability in the
fmt_entry ...)
- - ncurses <unfixed>
+ - ncurses 6.0+20170701-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1464692
CVE-2017-10684 (In ncurses 6.0, there is a stack-based buffer overflow in the
fmt_entry ...)
- - ncurses <unfixed>
+ - ncurses 6.0+20170701-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1464687
CVE-2017-10683 (In mpg123 1.25.0, there is a heap-based buffer over-read in
the ...)
{DLA-1017-1}
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
