Author: jmm Date: 2017-10-12 21:14:48 +0000 (Thu, 12 Oct 2017) New Revision: 56666
Modified: data/CVE/list data/dsa-needed.txt Log: libytnef no-dsa Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-10-12 21:10:16 UTC (rev 56665) +++ data/CVE/list 2017-10-12 21:14:48 UTC (rev 56666) @@ -8925,15 +8925,21 @@ NOTE: Negligable security impact CVE-2017-12144 (In ytnef 1.9.2, an allocation failure was found in the function ...) - libytnef <unfixed> (bug #870817) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/51 CVE-2017-12143 (In libquicktime 1.2.4, an allocation failure was found in the function ...) - libquicktime <unfixed> (unimportant) NOTE: Negligable security impact CVE-2017-12142 (In ytnef 1.9.2, an invalid memory read vulnerability was found in the ...) - - libytnef <unfixed> (bug #870816) + - libytnef <unfixed> (low; bug #870816) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/49 CVE-2017-12141 (In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in ...) - - libytnef <unfixed> (bug #870815) + - libytnef <unfixed> (low; bug #870815) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/50 CVE-2017-12140 (The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an ...) {DLA-1081-1} @@ -16311,23 +16317,33 @@ CVE-2017-9475 (Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to ...) NOT-FOR-US: Comcast XFINITY WiFi Home Hotspot devices CVE-2017-9474 (In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote ...) - - libytnef <unfixed> (bug #870192) + - libytnef <unfixed> (low; bug #870192) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/40 NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-decompressrtf-ytnef-c/ CVE-2017-9473 (In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote ...) - - libytnef <unfixed> (bug #870197) + - libytnef <unfixed> (low; bug #870197) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/42 NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-memory-allocation-failure-in-tneffillmapi-ytnef-c/ CVE-2017-9472 (In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote ...) - - libytnef <unfixed> (bug #870193) + - libytnef <unfixed> (low; bug #870193) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/41 NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/ CVE-2017-9471 (In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote ...) - - libytnef <unfixed> (bug #870194) + - libytnef <unfixed> (low; bug #870194) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/39 NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapword-ytnef-c/ CVE-2017-9470 (In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote ...) - - libytnef <unfixed> (bug #870196) + - libytnef <unfixed> (low; bug #870196) + [stretch] - libytnef <no-dsa> (Minor issue) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/37 NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/ CVE-2017-9469 (In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC ...) @@ -17945,7 +17961,8 @@ CVE-2017-9032 (Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ...) NOT-FOR-US: Trend Micro CVE-2017-9058 (In libytnef in ytnef through 1.9.2, there is a heap-based buffer ...) - - libytnef 1.9.2-2 (bug #862556) + - libytnef 1.9.2-2 (low; bug #862556) + [jessie] - libytnef <no-dsa> (Minor issue) NOTE: https://github.com/Yeraze/ytnef/issues/45 CVE-2017-9030 (The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 ...) NOT-FOR-US: Joomla extension Modified: data/dsa-needed.txt =================================================================== --- data/dsa-needed.txt 2017-10-12 21:10:16 UTC (rev 56665) +++ data/dsa-needed.txt 2017-10-12 21:14:48 UTC (rev 56666) @@ -31,8 +31,6 @@ -- libxml-libxml-perl (carnil) -- -libytnef --- linux Wait until more issues have piled up -- _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits