[Secure-testing-commits] r23586 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Sun Sep 8 20:28:54 UTC 2013


Author: carnil
Date: 2013-09-08 20:28:52 +0000 (Sun, 08 Sep 2013)
New Revision: 23586

Modified:
   data/CVE/list
Log:
Adjust version for CVE-2012-2091/simgear

Reason: 2.10.0-2 patch for CVE-2012-2091 had a off-by-one bug. So only
fixed in 2.10.0-3.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-09-08 20:21:26 UTC (rev 23585)
+++ data/CVE/list	2013-09-08 20:28:52 UTC (rev 23586)
@@ -26361,7 +26361,7 @@
 	RESERVED
 	- cobbler <itp> (bug #545583)
 CVE-2012-2091 (Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear ...)
-	- simgear 2.10.0-2 (unimportant; bug #669024)
+	- simgear 2.10.0-3 (unimportant; bug #669024)
 	- flightgear 2.6.0-1.1 (unimportant; bug #669025)
 	NOTE: Negligable security impact, very obscure attack vector
 CVE-2012-2090 (Multiple format string vulnerabilities in FlightGear 2.6 and earlier ...)




More information about the Secure-testing-commits mailing list