Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: a912c980 by Salvatore Bonaccorso at 2018-01-02T20:36:51+01:00 Add note about introducing changeset for CVE-2017-17484 The issue is likely be introduced by the upstream change https://ssl.icu-project.org/trac/changeset/40455/trunk/icu4c/source/common/ucnv_u8.cpp - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -6515,6 +6515,7 @@ CVE-2017-17484 (The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International . NOTE: Fixed by: https://ssl.icu-project.org/trac/changeset/40714 NOTE: Testcase: https://ssl.icu-project.org/trac/changeset/40715 NOTE: POC: https://ssl.icu-project.org/trac/attachment/ticket/13490/poc.cpp + NOTE: Likely introduced by: https://ssl.icu-project.org/trac/changeset/40455/trunk/icu4c/source/common/ucnv_u8.cpp CVE-2017-17483 RESERVED CVE-2017-17482 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a912c98040564090e3791192eeee33614ca188d5 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a912c98040564090e3791192eeee33614ca188d5 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
