Author: sectracker
Date: 2017-06-25 21:10:14 +0000 (Sun, 25 Jun 2017)
New Revision: 52910
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-06-25 20:58:11 UTC (rev 52909)
+++ data/CVE/list 2017-06-25 21:10:14 UTC (rev 52910)
@@ -1,3 +1,25 @@
+CVE-2017-9872 (The III_dequantize_sample function in layer3.c in mpglib, as
used in ...)
+ TODO: check
+CVE-2017-9871 (The III_i_stereo function in layer3.c in mpglib, as used in ...)
+ TODO: check
+CVE-2017-9870 (The III_i_stereo function in layer3.c in mpglib, as used in ...)
+ TODO: check
+CVE-2017-9869 (The II_step_one function in layer2.c in mpglib, as used in ...)
+ TODO: check
+CVE-2017-9868 (In Mosquitto through 1.4.12, mosquitto.db (aka the persistence
file) is ...)
+ TODO: check
+CVE-2017-9867
+ RESERVED
+CVE-2017-9866
+ RESERVED
+CVE-2017-9865 (The function GfxImageColorMap::getGray in GfxState.cc in
Poppler 0.54.0 ...)
+ TODO: check
+CVE-2015-9101 (The fill_buffer_resample function in util.c in libmp3lame.a in
LAME ...)
+ TODO: check
+CVE-2015-9100 (The fill_buffer_resample function in util.c in libmp3lame.a in
LAME ...)
+ TODO: check
+CVE-2015-9099 (The lame_init_params function in lame.c in libmp3lame.a in LAME
3.99.5 ...)
+ TODO: check
CVE-2017-9864
RESERVED
CVE-2017-9863
@@ -48,8 +70,8 @@
RESERVED
CVE-2017-9841
RESERVED
-CVE-2017-9840
- RESERVED
+CVE-2017-9840 (Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to
upload ...)
+ TODO: check
CVE-2017-9839
RESERVED
CVE-2017-9838
@@ -3146,7 +3168,7 @@
RESERVED
CVE-2017-9233
RESERVED
- {DLA-990-1}
+ {DSA-3898-1 DLA-990-1}
- expat 2.2.1-1
NOTE: https://libexpat.github.io/doc/cve-2017-9233/
NOTE:
https://github.com/libexpat/libexpat/commit/c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
