[Secure-testing-commits] r40426 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-17 06:08:15 +0000 (Thu, 17 Mar 2016)
New Revision: 40426

Modified:
   data/CVE/list
Log:
CVEs assigned for minissdpd

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-17 06:06:07 UTC (rev 40425)
+++ data/CVE/list	2016-03-17 06:08:15 UTC (rev 40426)
@@ -428,10 +428,6 @@
 	RESERVED
 	- torbrowser-launcher 0.2.4-1
 	NOTE: https://github.com/micahflee/torbrowser-launcher/issues/229
-CVE-2016-3179
-	RESERVED
-CVE-2016-3178
-	RESERVED
 CVE-2016-3177 [gifcolor: use-after-free in EGifCloseFile]
 	RESERVED
 	- giflib-tools <unfixed> (unimportant)
@@ -1232,10 +1228,14 @@
 	- chromium-browser 49.0.2623.75-1
 	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 	[squeeze] - chromium-browser <end-of-life> (Not supported in Squeeze LTS)
-CVE-2016-XXXX [improper validation of array index vulnerability]
+CVE-2016-3178
 	- minissdpd <unfixed> (bug #816759)
 	NOTE: https://speirofr.appspot.com/files/advisory/SPADV-2016-02.md
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/03/07/9
+	NOTE: https://github.com/miniupnp/miniupnp/commit/b238cade9a173c6f751a34acf8ccff838a62aa47
+CVE-2016-3179
+	- minissdpd <unfixed> (bug #816759)
+	NOTE: https://speirofr.appspot.com/files/advisory/SPADV-2016-02.md
+	NOTE: https://github.com/miniupnp/miniupnp/commit/140ee8d2204b383279f854802b27bdb41c1d5d1a
 CVE-2016-2842 (The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 ...)
 	{DSA-3500-1}
 	- openssl 1.0.2g-1