Author: carnil
Date: 2017-12-17 20:00:05 +0000 (Sun, 17 Dec 2017)
New Revision: 58660
Modified:
data/CVE/list
Log:
Mark CVE-2017-17516/rtv as unimportant
The problematic script, and with negligible impact, is only in source
and not installed in the binary package.
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-12-17 19:54:57 UTC (rev 58659)
+++ data/CVE/list 2017-12-17 20:00:05 UTC (rev 58660)
@@ -4926,7 +4926,7 @@
[wheezy] - sylpheed <no-dsa> (Minor issue)
NOTE:
https://sources.debian.org/src/sylpheed/3.5.1-1/libsylph/utils.c/?hl=4292#L4292
CVE-2017-17516 (scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV)
1.19.0 ...)
- - rtv <unfixed>
+ - rtv <unfixed> (unimportant)
NOTE:
https://sources.debian.org/src/rtv/1.20.0+dfsg-1/scripts/inspect_webbrowser.py/
CVE-2017-17515 (etc/ObjectList in Metview 4.7.3 does not validate strings
before ...)
- metview <unfixed> (unimportant)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
