Author: jmm
Date: 2017-09-15 15:09:26 +0000 (Fri, 15 Sep 2017)
New Revision: 55791

Modified:
   data/CVE/list
Log:
binutils fixed
two unrar issues unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2017-09-15 14:55:25 UTC (rev 55790)
+++ data/CVE/list       2017-09-15 15:09:26 UTC (rev 55791)
@@ -952,7 +952,7 @@
        NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=22058
        NOTE: 
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=2a143b99fc4a5094a9cf128f3184d8e6818c8229
 CVE-2017-14129 (The read_section function in dwarf2.c in the Binary File 
Descriptor ...)
-       - binutils <unfixed> (low)
+       - binutils 2.29-10 (low)
        [stretch] - binutils <ignored> (Minor issue)
        [jessie] - binutils <ignored> (Minor issue)
        [wheezy] - binutils <ignored> (Minor issue)
@@ -976,13 +976,13 @@
 CVE-2017-14123 (Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted 
File ...)
        NOT-FOR-US: Zoho ManageEngine
 CVE-2017-14122 (unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a 
stack-based ...)
-       - unrar-free <unfixed> (bug #874060)
-       [wheezy] - unrar-free <no-dsa> (Minor issue)
+       - unrar-free <unfixed> (unimportant; bug #874060)
        NOTE: http://www.openwall.com/lists/oss-security/2017/08/20/1
+       NOTE: Crash in CLI tool, no security impact
 CVE-2017-14121 (The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka 
unrar-free ...)
-       - unrar-free <unfixed> (bug #874061)
-       [wheezy] - unrar-free <no-dsa> (Minor issue)
+       - unrar-free <unfixed> (unimportant; bug #874061)
        NOTE: http://www.openwall.com/lists/oss-security/2017/08/20/1
+       NOTE: Crash in CLI tool, no security impact
 CVE-2017-14120 (unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a 
directory ...)
        {DLA-1091-1}
        - unrar-free 1:0.0.1+cvs20140707-2 (bug #874059)


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to