[Secure-testing-commits] r23245 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Thu Aug 8 08:52:53 UTC 2013


Author: carnil
Date: 2013-08-08 08:52:53 +0000 (Thu, 08 Aug 2013)
New Revision: 23245

Modified:
   data/CVE/list
Log:
add bugnumbers also for filezilla

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-08-08 08:51:20 UTC (rev 23244)
+++ data/CVE/list	2013-08-08 08:52:53 UTC (rev 23245)
@@ -1914,17 +1914,17 @@
 CVE-2013-4208 [Private keys left in memory after being used by PuTTY tools]
 	RESERVED
 	- putty 0.63-1
-	- filezilla <unfixed>
+	- filezilla <unfixed> (bug #719070)
 	NOTE: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped.html
 CVE-2013-4207 [non-coprime values in DSA signatures can cause buffer overflow in modular inverse]
 	RESERVED
 	- putty 0.63-1
-	- filezilla <unfixed>
+	- filezilla <unfixed> (bug #719070)
 	NOTE: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html
 CVE-2013-4206 [buffer underrun in modmul can corrupt the heap]
 	RESERVED
 	- putty 0.63-1
-	- filezilla <unfixed>
+	- filezilla <unfixed> (bug #719070)
 	NOTE: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.html
 CVE-2013-4205 [CLONE_NEWUSER local DoS]
 	RESERVED




More information about the Secure-testing-commits mailing list