[Secure-testing-commits] r23245 - data/CVE
Salvatore Bonaccorso
carnil at alioth.debian.org
Thu Aug 8 08:52:53 UTC 2013
Author: carnil
Date: 2013-08-08 08:52:53 +0000 (Thu, 08 Aug 2013)
New Revision: 23245
Modified:
data/CVE/list
Log:
add bugnumbers also for filezilla
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-08-08 08:51:20 UTC (rev 23244)
+++ data/CVE/list 2013-08-08 08:52:53 UTC (rev 23245)
@@ -1914,17 +1914,17 @@
CVE-2013-4208 [Private keys left in memory after being used by PuTTY tools]
RESERVED
- putty 0.63-1
- - filezilla <unfixed>
+ - filezilla <unfixed> (bug #719070)
NOTE: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped.html
CVE-2013-4207 [non-coprime values in DSA signatures can cause buffer overflow in modular inverse]
RESERVED
- putty 0.63-1
- - filezilla <unfixed>
+ - filezilla <unfixed> (bug #719070)
NOTE: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html
CVE-2013-4206 [buffer underrun in modmul can corrupt the heap]
RESERVED
- putty 0.63-1
- - filezilla <unfixed>
+ - filezilla <unfixed> (bug #719070)
NOTE: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.html
CVE-2013-4205 [CLONE_NEWUSER local DoS]
RESERVED
More information about the Secure-testing-commits
mailing list