[Secure-testing-commits] r50426 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Apr 7 04:54:23 UTC 2017


Author: carnil
Date: 2017-04-07 04:54:23 +0000 (Fri, 07 Apr 2017)
New Revision: 50426

Modified:
   data/CVE/list
Log:
Add fixing version for CVE-2017-6596/partclone in unstable

I kept the experimental tagged entry to still keep the record of the fix
in experimental. Strictly spaeking I should have dropped that since we
track first version in unstable containing the fix and 0.2.90-1 will
come in any case later than 0.2.89-3 version-wise and we do not have
version-tracking like BTS.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-07 04:54:13 UTC (rev 50425)
+++ data/CVE/list	2017-04-07 04:54:23 UTC (rev 50426)
@@ -2514,7 +2514,7 @@
 	RESERVED
 CVE-2017-6596 (partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer ...)
 	[experimental] - partclone 0.2.90-1
-	- partclone <unfixed> (bug #857966)
+	- partclone 0.2.89-3 (bug #857966)
 	[jessie] - partclone <no-dsa> (Minor issue)
 	NOTE: https://github.com/insidej/Partclone_HeapOverFlow/blob/master/README.md
 	NOTE: https://github.com/Thomas-Tsai/partclone/issues/91




More information about the Secure-testing-commits mailing list