[Secure-testing-commits] r39261 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-28 15:32:29 +0000 (Thu, 28 Jan 2016)
New Revision: 39261

Modified:
   data/CVE/list
Log:
Check CVE-2016-2090/libbsd

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-28 15:15:37 UTC (rev 39260)
+++ data/CVE/list	2016-01-28 15:32:29 UTC (rev 39261)
@@ -1,8 +1,11 @@
 CVE-2016-2090 [Heap buffer overflow in fgetwln function of libbsd]
 	- libbsd 0.8.2-1
+	[wheezy] - libbsd <not-affected> (Vulnerable code not present)
+	[squeeze] - libbsd <not-affected> (Vulnerable code not present)
 	NOTE: https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=93881
-	NOTE: http://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7
+	NOTE: Fixed by: http://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7 (0.8.2)
+	NOTE: Introduced by: http://cgit.freedesktop.org/libbsd/commit/?id=a97ce513e031b29a47965b740be14fb9a84277fc (0.5.0)
 CVE-2016-2089 [invalid read in the JasPer's jas_matrix_clip() function]
 	- jasper <unfixed> (bug #812978)
 CVE-2016-2085