Author: jmm Date: 2017-08-21 09:00:11 +0000 (Mon, 21 Aug 2017) New Revision: 54928
Modified: data/CVE/list data/dsa-needed.txt Log: NFUs openjpeg unimportant Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-08-21 08:57:33 UTC (rev 54927) +++ data/CVE/list 2017-08-21 09:00:11 UTC (rev 54928) @@ -1,15 +1,15 @@ CVE-2017-12982 [memory allocation failure in opj_aligned_alloc_n (opj_malloc.c)] - - openjpeg2 <unfixed> + - openjpeg2 <unfixed> (unimportant) NOTE: https://github.com/uclouvain/openjpeg/issues/983 NOTE: https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7 CVE-2017-12975 RESERVED CVE-2017-12974 (Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ...) - TODO: check + NOT-FOR-US: Nimbus JOSE + JWT CVE-2017-12973 (Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an ...) - TODO: check + NOT-FOR-US: Nimbus JOSE + JWT CVE-2017-12972 (In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when ...) - TODO: check + NOT-FOR-US: Nimbus JOSE + JWT CVE-2017-12976 [Command injection via malicious ssh URLs] - git-annex 6.20170818-1 NOTE: http://source.git-annex.branchable.com/?p=source.git;a=commit;h=df11e54788b254efebb4898b474de11ae8d3b471 Modified: data/dsa-needed.txt =================================================================== --- data/dsa-needed.txt 2017-08-21 08:57:33 UTC (rev 54927) +++ data/dsa-needed.txt 2017-08-21 09:00:11 UTC (rev 54928) @@ -38,7 +38,7 @@ -- graphicsmagick -- -imagemagick +imagemagick (jmm) wait until more issues have piled up -- jbig2dec _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits