[Secure-testing-commits] r33203 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Mar 28 05:30:55 UTC 2015


Author: carnil
Date: 2015-03-28 05:30:55 +0000 (Sat, 28 Mar 2015)
New Revision: 33203

Modified:
   data/CVE/list
Log:
Another CVE assigned for freexl, CVE-2015-2776

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-28 05:15:00 UTC (rev 33202)
+++ data/CVE/list	2015-03-28 05:30:55 UTC (rev 33203)
@@ -141,12 +141,10 @@
 	RESERVED
 	- realmd <unfixed> (bug #781179)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=89207
-CVE-2015-XXXX [Multiple vulnerabilities]
+CVE-2015-2776 [does not properly check requests for workbook memory allocation]
 	[experimental] - freexl 1.0.1-1~exp1
 	- freexl 1.0.0g-1+deb8u1 (bug #781228)
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/25/1
-	NOTE: entry might be split up depending on how many CVEs MITRE assigns,
-	NOTE: two were already assigned (CVE-2015-2753 and CVE-2015-2754)
+	NOTE: Reproducer: https://www.dropbox.com/s/gh61gzaf8jj30hj/freexl_6889d18b?dl=0
 CVE-2015-2754
 	RESERVED
 	[experimental] - freexl 1.0.1-1~exp1




More information about the Secure-testing-commits mailing list