[Secure-testing-commits] r46982 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-12 06:34:56 +0000 (Mon, 12 Dec 2016)
New Revision: 46982

Modified:
   data/CVE/list
Log:
Add fixing version for CVE-2014-9913 and CVE-2016-9844

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-12 05:22:32 UTC (rev 46981)
+++ data/CVE/list	2016-12-12 06:34:56 UTC (rev 46982)
@@ -1946,14 +1946,14 @@
 	NOTE: Report: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf
 CVE-2016-9844 [zipinfo buffer overflow]
 	RESERVED
-	- unzip <unfixed> (bug #847486)
+	- unzip 6.0-21 (bug #847486)
 	[jessie] - unzip <no-dsa> (Minor issue)
 	NOTE: https://launchpad.net/bugs/1643750
 	NOTE: http://www.openwall.com/lists/oss-security/2016/12/05/13
 	NOTE: Proposed patch in http://www.openwall.com/lists/oss-security/2016/12/05/19
 CVE-2014-9913 [Buffer overflow in "unzip -l" via list_files() in list.c]
 	RESERVED
-	- unzip <unfixed> (bug #847485)
+	- unzip 6.0-21 (bug #847485)
 	[jessie] - unzip <no-dsa> (Minor issue)
 	NOTE: Upstream bug: http://www.info-zip.org/phpBB3/viewtopic.php?f=7&t=450
 	NOTE: Same reproducer as in https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750