Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2beeb03c by Salvatore Bonaccorso at 2018-02-27T20:40:07+01:00
Update status on CVE-2017-18201/libcdio
The isuse was introduced in version 0.92 as there was a major change in
0.90 as to how CD-TEXT was handled.
Thanks: Rocky Bernstein <ro...@gnu.org>
Signed-off-by: Salvatore Bonaccorso <car...@debian.org>
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -137,6 +137,9 @@ CVE-2018-7485 (The SQLWriteFileDSN function in
odbcinst/SQLWriteFileDSN.c in uni
CVE-2017-18201 (An issue was discovered in GNU libcdio before 2.0.0. There is
a double ...)
[experimental] - libcdio 2.0.0-1
- libcdio <unfixed> (bug #891638)
+ [stretch] - libcdio <not-affected> (Vulnerable code introduced post
0.92)
+ [jessie] - libcdio <not-affected> (Vulnerable code introduced post 0.92)
+ [wheezy] - libcdio <not-affected> (Vulnerable code introduced post 0.92)
NOTE: Fixed by
https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d
NOTE: with
https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=dec2f876c2d7162da213429bce1a7140cdbdd734
CVE-2018-7484 (An issue was discovered in PureVPN through 5.19.4.0 on Windows.
The ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2beeb03c5443a7dee9f1f8fcfa359bee618c5883
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2beeb03c5443a7dee9f1f8fcfa359bee618c5883
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
