[Secure-testing-commits] r22522 - data/CVE
Salvatore Bonaccorso
carnil at alioth.debian.org
Thu Jun 6 14:29:30 UTC 2013
Author: carnil
Date: 2013-06-06 14:29:29 +0000 (Thu, 06 Jun 2013)
New Revision: 22522
Modified:
data/CVE/list
Log:
add bugnumbers for darktable and libkdcraw issue, CVE-2013-2126
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-06-06 10:02:27 UTC (rev 22521)
+++ data/CVE/list 2013-06-06 14:29:29 UTC (rev 22522)
@@ -4136,8 +4136,8 @@
- libraw <unfixed> (low; bug #710353)
[wheezy] - libraw <no-dsa> (Not suitable for code injection, minor issue)
[squeeze] - libraw <not-affected> (Vulnerable code not present)
- - libkdcraw <unfixed>
- - darktable <unfixed>
+ - libkdcraw <unfixed> (bug #711317)
+ - darktable <unfixed> (bug #711316)
NOTE: http://www.openwall.com/lists/oss-security/2013/05/28/3
NOTE: https://github.com/LibRaw/LibRaw/commit/19ffddb0fe1a4ffdb459b797ffcf7f490d28b5a6
CVE-2013-2125
More information about the Secure-testing-commits
mailing list