Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 6de3b0d3 by Salvatore Bonaccorso at 2018-03-12T17:11:10+01:00 Add note for abiword explaining problem with --with-gnomevfs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -17840,7 +17840,9 @@ CVE-2017-17529 (af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate s [wheezy] - abiword <no-dsa> (Minor issue) NOTE: https://sources.debian.org/src/abiword/3.0.2-5/src/af/util/xp/ut_go_file.cpp/#L1717 NOTE: Issue can be mitigated by compiling abiword in future with --with-gnomevfs so that - NOTE: abiword does not use the problematic fallback_open_uri. + NOTE: abiword does not use the problematic fallback_open_uri. This though only works for + NOTE: GTK+-2. Abiword in Debian is compiled against GTK+3+ + NOTE: See explanation in https://bugs.debian.org/884923#15 CVE-2017-17528 (backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not ...) - scummvm <unfixed> (unimportant) [wheezy] - scummvm <not-affected> (Vulnerable code not there) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6de3b0d3b1564e2e0b1a21057bf6c20b3e87cf58 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6de3b0d3b1564e2e0b1a21057bf6c20b3e87cf58 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits