summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2017-06-17 05:06:18 +0000
committerSalvatore Bonaccorso <carnil@debian.org>2017-06-17 05:06:18 +0000
commit9e19e1f4325683c0dd808ec08a0bca824b3ca662 (patch)
treef508baf7012e80382f4c05d33def508fe42d1c69 /data
parentf1fdfd85428e063242b945ab44c58e62c4696745 (diff)
Update status for CVE-2017-9670/gnuplot5
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@52633 e39458fd-73e7-0310-bf30-c45bca0a0e42
Diffstat (limited to 'data')
-rw-r--r--data/CVE/list2
1 files changed, 1 insertions, 1 deletions
diff --git a/data/CVE/list b/data/CVE/list
index ff01ebadb4..64daecf9c2 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -139,7 +139,7 @@ CVE-2017-9670 (An uninitialized stack variable vulnerability in load_tic_series(
[jessie] - gnuplot <not-affected> (Vulnerable code introduced later)
[wheezy] - gnuplot <not-affected> (Vulnerable code introduced later)
- gnuplot5 <removed> (bug #864903)
- [jessie] - gnuplot5 <no-dsa> (Minor issue)
+ [jessie] - gnuplot5 <not-affected> (Vulnerable code introduced later)
NOTE: https://sourceforge.net/p/gnuplot/bugs/1933/
NOTE: The specific CVE is for the uninitialized stack variable fixed via set.c
NOTE: https://bugzilla.novell.com/show_bug.cgi?id=1044638#c5

© 2014-2024 Faster IT GmbH | imprint | privacy policy