Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dd173858 by Salvatore Bonaccorso at 2018-02-21T22:04:28+01:00
Add three CVEs in apport for further tracking
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -28036,15 +28036,21 @@ CVE-2017-14183
CVE-2017-14182 (A Denial of Service (DoS) vulnerability in Fortinet FortiOS
5.4.0 to ...)
NOT-FOR-US: Fortinet
CVE-2017-14180 (Apport 2.13 through 2.20.7 does not properly handle crashes
...)
- TODO: check
+ [experimental] - apport <unfixed>
+ NOTE: apport only in experimental, so we cannot track this in
security-tracker
+ NOTE: add it, to have an explicit reference for apport if it ever
enters unstable
CVE-2017-14179 (Apport before 2.13 does not properly handle crashes
originating from a ...)
- TODO: check
+ [experimental] - apport <unfixed>
+ NOTE: apport only in experimental, so we cannot track this in
security-tracker
+ NOTE: add it, to have an explicit reference for apport if it ever
enters unstable
CVE-2017-14178 (In snapd 2.27 through 2.29.2 the 'snap logs' command could be
made to ...)
- snapd 2.30-1
[stretch] - snapd <not-affected> (Issue introduced in 2.27)
NOTE: https://launchpad.net/bugs/1730255
CVE-2017-14177 (Apport through 2.20.7 does not properly handle core dumps from
setuid ...)
- TODO: check
+ [experimental] - apport <unfixed>
+ NOTE: apport only in experimental, so we cannot track this in
security-tracker
+ NOTE: add it, to have an explicit reference for apport if it ever
enters unstable
CVE-2017-14181 (DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools
aacplusenc 0.17.5 ...)
NOT-FOR-US: aacplusenc
CVE-2017-14175 (In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in
ReadXBMImage() due ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/dd173858c080da3edbef6e75e166c99fb418e0de
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/dd173858c080da3edbef6e75e166c99fb418e0de
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
