Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
6de3b0d3 by Salvatore Bonaccorso at 2018-03-12T17:11:10+01:00
Add note for abiword explaining problem with --with-gnomevfs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -17840,7 +17840,9 @@ CVE-2017-17529 (af/util/xp/ut_go_file.cpp in AbiWord 
3.0.2-2 does not validate s
        [wheezy] - abiword <no-dsa> (Minor issue)
        NOTE: 
https://sources.debian.org/src/abiword/3.0.2-5/src/af/util/xp/ut_go_file.cpp/#L1717
        NOTE: Issue can be mitigated by compiling abiword in future with 
--with-gnomevfs so that
-       NOTE: abiword does not use the problematic fallback_open_uri.
+       NOTE: abiword does not use the problematic fallback_open_uri. This 
though only works for
+       NOTE: GTK+-2. Abiword in Debian is compiled against GTK+3+
+       NOTE: See explanation in https://bugs.debian.org/884923#15
 CVE-2017-17528 (backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does 
not ...)
        - scummvm <unfixed> (unimportant)
        [wheezy] - scummvm <not-affected> (Vulnerable code not there)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6de3b0d3b1564e2e0b1a21057bf6c20b3e87cf58

---
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6de3b0d3b1564e2e0b1a21057bf6c20b3e87cf58
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to