Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
00d951de by Salvatore Bonaccorso at 2018-01-28T22:40:50+01:00
Update information on CVE-2017-837{2,3}/libmad
The originally applied patch only covered the real underlying issue,
which got now fixed with a patch written by Kurt and applied in
0.15.1b-9.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -42464,14 +42464,16 @@ CVE-2017-8374 (The mad_bit_skip function in bit.c in
Underbit MAD libmad 0.15.1b
- libmad 0.15.1b-4
NOTE: Addressed by patch from #508133
CVE-2017-8373 (The mad_layer_III function in layer3.c in Underbit MAD libmad
0.15.1b ...)
- - libmad 0.15.1b-4
- NOTE: Addressed by patch from #508133
- NOTE: Duplicate with CVE-2017-8372
+ - libmad 0.15.1b-9 (bug #287519)
+ NOTE: Addressed/Covered by patch from #508133
+ NOTE: The patch applied in 0.15.1b-4 only covered the actual issue
+ NOTE: "Duplicate with"/basically same as CVE-2017-8372
CVE-2017-8372 (The mad_layer_III function in layer3.c in Underbit MAD libmad
0.15.1b, ...)
- - libmad 0.15.1b-4 (unimportant)
+ - libmad 0.15.1b-9 (bug #287519)
NOTE:
https://blogs.gentoo.org/ago/2017/04/30/libmad-assertion-failure-in-layer3-c/
- NOTE: Addressed by patch from #508133
- NOTE: Duplicate with CVE-2017-8373
+ NOTE: Addressed/Covered by patch from #508133
+ NOTE: The patch applied in 0.15.1b-4 only covered the actual issue
+ NOTE: "Duplicate" with/basically same as CVE-2017-8373
CVE-2017-8371 (Schneider Electric StruxureWare Data Center Expert before 7.4.0
uses ...)
NOT-FOR-US: Schneider Electric
CVE-2017-8370 (IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows
remote ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/00d951de4ab2f295b176f32b864b226db0a80039
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/00d951de4ab2f295b176f32b864b226db0a80039
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
