[Secure-testing-commits] r31575 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jan 21 15:17:17 UTC 2015


Author: carnil
Date: 2015-01-21 15:17:17 +0000 (Wed, 21 Jan 2015)
New Revision: 31575

Modified:
   data/CVE/list
Log:
Add another procmail/formail issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-21 13:56:15 UTC (rev 31574)
+++ data/CVE/list	2015-01-21 15:17:17 UTC (rev 31575)
@@ -35,6 +35,9 @@
 	NOTE: http://bugs.gnu.org/19563
 	NOTE: Upstream fix: http://git.sv.gnu.org/cgit/grep.git/commit/?id=83a95bd8c8561875b948cadd417c653dbe7ef2e2
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/01/18/12
+CVE-2014-XXXX [formail: memory corruption]
+	- procmail <unfixed> (bug #769937)
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/01/21/9
 CVE-2014-XXXX [GTK+ improperly handled the menu key, possibly allowing lock screen bypass]
 	- gtk+3.0 <unfixed> (bug #759145)
 	[wheezy] - gtk+3.0 <not-affected> (Vulnerable code not present)




More information about the Secure-testing-commits mailing list