[Secure-testing-commits] r46461 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Nov 22 20:10:32 UTC 2016


Author: carnil
Date: 2016-11-22 20:10:31 +0000 (Tue, 22 Nov 2016)
New Revision: 46461

Modified:
   data/CVE/list
Log:
Add commits for CVE-2016-4331/hdf5

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-22 20:06:57 UTC (rev 46460)
+++ data/CVE/list	2016-11-22 20:10:31 UTC (rev 46461)
@@ -17267,6 +17267,8 @@
 CVE-2016-4331 (When decoding data out of a dataset encoded with the H5Z_NBIT ...)
 	- hdf5 <unfixed> (bug #845301)
 	NOTE: http://www.talosintelligence.com/reports/TALOS-2016-0177/
+	NOTE: Fixed by: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/commits/e1c4ec3d541eecda78b3afcb1a0fa071c4b52afa
+	NOTE: Fixed by: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/commits/43ec23616697ce0ea3f99e40900fec55fe9107ef
 CVE-2016-4330 (In the HDF5 1.8.16 library's failure to check if the number of ...)
 	- hdf5 <unfixed> (bug #845301)
 	NOTE: http://www.talosintelligence.com/reports/TALOS-2016-0176/




More information about the Secure-testing-commits mailing list