Author: carnil
Date: 2017-08-19 09:19:08 +0000 (Sat, 19 Aug 2017)
New Revision: 54876
Modified:
data/CVE/list
Log:
Add CVE-2017-12962/libsass
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-08-19 09:16:11 UTC (rev 54875)
+++ data/CVE/list 2017-08-19 09:19:08 UTC (rev 54876)
@@ -7,7 +7,8 @@
NOTE: Similar issue to CVE-2017-11555 but for the issue which remains
unfixed
NOTE: with the upstream patch for CVE-2017-11555.
CVE-2017-12962 (There are memory leaks in LibSass 3.4.5 triggered by deeply
nested ...)
- TODO: check
+ - libsass <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1482331
CVE-2017-12961 (There is an assertion abort in the function parse_attributes()
in ...)
TODO: check
CVE-2017-12960 (There is a reachable assertion abort in the function
dict_rename_var() ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
