[Secure-testing-commits] r39503 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Fri Feb 5 22:45:27 UTC 2016


Author: jmm
Date: 2016-02-05 22:45:27 +0000 (Fri, 05 Feb 2016)
New Revision: 39503

Modified:
   data/CVE/list
Log:
fix CVE IDs for uclibc and use existing temp entries


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-05 22:39:34 UTC (rev 39502)
+++ data/CVE/list	2016-02-05 22:45:27 UTC (rev 39503)
@@ -1,11 +1,13 @@
-CVE-2016-XXXX [denial of service while parsing compressed items]
-	- uclibc <unfixed>
+CVE-2016-2224 [denial of service while parsing compressed items]
+	- uclibc <unfixed> (unimportant)
+	NOTE: Just for cross-compiling, not used for actual packages
 	NOTE: http://repo.or.cz/uclibc-ng.git/commit/16719c1a7078421928e6d31dd1dec574825ef515
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/02/05/2
-CVE-2016-XXXX [crafted packet will make the parser terminate early]
-	- uclibc <unfixed>
+	NOTE: http://www.openwall.com/lists/oss-security/2016/02/05/2
+CVE-2016-2225 [crafted packet will make the parser terminate early]
+	- uclibc <unfixed> (unimportant)
+	NOTE: Just for cross-compiling, not used for actual packages
 	NOTE: http://repo.or.cz/uclibc-ng.git/commit/bb01edff0377f2585ce304ecbadcb7b6cde372ac
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/02/05/2
+	NOTE: http://www.openwall.com/lists/oss-security/2016/02/05/2
 CVE-2016-2216
 	RESERVED
 CVE-2016-2215
@@ -24685,12 +24687,8 @@
 	RESERVED
 CVE-2015-2225
 	RESERVED
-	- uclibc <unfixed> (unimportant)
-	NOTE: Just for cross-compiling, not used for actual packages
 CVE-2015-2224
 	RESERVED
-	- uclibc <unfixed> (unimportant)
-	NOTE: Just for cross-compiling, not used for actual packages
 CVE-2015-2223 (Multiple cross-site scripting (XSS) vulnerabilities in Palo Alto ...)
 	NOT-FOR-US: Palo Alto Networks Traps
 CVE-2015-2222 (ClamAV before 0.98.7 allows remote attackers to cause a denial of ...)




More information about the Secure-testing-commits mailing list