Author: carnil
Date: 2017-09-26 05:03:07 +0000 (Tue, 26 Sep 2017)
New Revision: 56144
Modified:
data/CVE/list
Log:
Add new binutils issue
Older suites marked straight as ignored. This is not fully correct, it
has not been invesgitated if potentially it's not affecting jessie and
might be <not-affected> instead.
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-09-26 04:50:16 UTC (rev 56143)
+++ data/CVE/list 2017-09-26 05:03:07 UTC (rev 56144)
@@ -4,7 +4,13 @@
CVE-2017-14730 (The init script in the Gentoo app-admin/logstash-bin package
before ...)
TODO: check
CVE-2017-14729 (The *_get_synthetic_symtab functions in the Binary File
Descriptor ...)
- TODO: check
+ - binutils <unfixed>
+ [stretch] - binutils <ignored> (Minor issue)
+ [jessie] - binutils <ignored> (Minor issue)
+ NOTE:
https://blogs.gentoo.org/ago/2017/09/25/binutils-heap-based-buffer-overflow-in-_bfd_x86_elf_get_synthetic_symtab-elfxx-x86-c/
+ NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=22170
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=56933f9e3e90eebf1018ed7417d6c1184b91db6b
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=61e3bf5f83f7e505b6bc51ef65426e5b31e6e360
CVE-2017-14728
RESERVED
CVE-2017-14726 (Before version 4.8.2, WordPress was vulnerable to a cross-site
...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
