[Secure-testing-commits] r43330 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Thu Jul 21 05:58:30 UTC 2016
Author: carnil
Date: 2016-07-21 05:58:30 +0000 (Thu, 21 Jul 2016)
New Revision: 43330
Modified:
data/CVE/list
Log:
Add workaround entry for one libarchive issue fixed in DLA-554-1
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-07-21 05:48:32 UTC (rev 43329)
+++ data/CVE/list 2016-07-21 05:58:30 UTC (rev 43330)
@@ -25,6 +25,8 @@
NOTE: http://news.gmane.org/find-root.php?message_id=alpine.DEB.2.20.1607181048300.24083%40tglase.lan.tarent.de
CVE-2016-XXXX [Integer overflow when verifying filename size]
- libarchive 3.2.1-1
+ [wheezy] - libarchive 3.0.4-3+wheezy2
+ NOTE: Workaround entry for DLA-554-1 until CVE is assigned
NOTE: https://github.com/libarchive/libarchive/issues/711
NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/3014e19820ea53c15c90f9d447ca3e668a0b76c6 (v3.2.1)
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/07/20/1
More information about the Secure-testing-commits
mailing list