Author: carnil
Date: 2017-10-16 19:38:32 +0000 (Mon, 16 Oct 2017)
New Revision: 56763
Modified:
data/CVE/list
Log:
Update status for jessie and stretch for CVE-2017-15286/sqlite3
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-10-16 18:40:57 UTC (rev 56762)
+++ data/CVE/list 2017-10-16 19:38:32 UTC (rev 56763)
@@ -232,6 +232,8 @@
NOT-FOR-US: BouquetEditor WebPlugin
CVE-2017-15286 (SQLite 3.20.1 has a NULL pointer dereference in
tableColumnList in ...)
- sqlite3 3.20.1-2 (low; bug #878680)
+ [stretch] - sqlite3 <not-affected> (Vulnerable code introduced later)
+ [jessie] - sqlite3 <not-affected> (Vulnerable code introduced later)
[wheezy] - sqlite3 <not-affected> (Vulnerable code not present)
NOTE: https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md
NOTE: https://www.sqlite.org/src/info/5d0ceb8dcdef92cd
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
