[Secure-testing-commits] r31184 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jan 7 16:51:57 UTC 2015


Author: carnil
Date: 2015-01-07 16:51:57 +0000 (Wed, 07 Jan 2015)
New Revision: 31184

Modified:
   data/CVE/list
Log:
Add two libmspack issues found by jwilk

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-07 16:08:00 UTC (rev 31183)
+++ data/CVE/list	2015-01-07 16:51:57 UTC (rev 31184)
@@ -1,3 +1,7 @@
+CVE-2015-XXXX [CHM decompression: pointer arithmetic overflow]
+        - libmspack <unfixed> (bug #774726)
+CVE-2015-XXXX [CHM decompression: division by zero]
+        - libmspack <unfixed> (bug #774725)
 CVE-2015-XXXX [directory traversal]
 	- arc <unfixed> (bug #774527)
 CVE-2015-XXXX [saves unknown host's fingerprint in known_hosts without any prompt]




More information about the Secure-testing-commits mailing list