[Secure-testing-commits] r45525 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Oct 23 11:08:58 UTC 2016


Author: carnil
Date: 2016-10-23 11:08:58 +0000 (Sun, 23 Oct 2016)
New Revision: 45525

Modified:
   data/CVE/list
Log:
Add temporary description for CVE-2016-8886

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-23 11:08:18 UTC (rev 45524)
+++ data/CVE/list	2016-10-23 11:08:58 UTC (rev 45525)
@@ -15,7 +15,7 @@
 	NOTE: When fixing this issue look at the followup report
 	NOTE: https://blogs.gentoo.org/ago/2016/10/23/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c-incomplete-fix-for-cve-2016-8887
 	NOTE: and include the fix to not make jasper vulnerable to the incomplete fix.
-CVE-2016-8886
+CVE-2016-8886 [memory allocation failure in jas_malloc (jas_malloc.c)]
 	- jasper <unfixed>
 	NOTE: https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c
 CVE-2016-XXXX [sendmail: Privilege escalation from group smmsp to root]




More information about the Secure-testing-commits mailing list