[Secure-testing-commits] r48584 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Jan 31 05:33:24 UTC 2017


Author: carnil
Date: 2017-01-31 05:33:23 +0000 (Tue, 31 Jan 2017)
New Revision: 48584

Modified:
   data/CVE/list
Log:
Mark wavpack issues as fixed with unstable upload

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-31 01:27:58 UTC (rev 48583)
+++ data/CVE/list	2017-01-31 05:33:23 UTC (rev 48584)
@@ -233,23 +233,23 @@
 	NOTE: https://bugzilla.opensuse.org/show_bug.cgi?id=1021740
 CVE-2016-10172 [heap oob read in read_new_config_info / open_utils.c]
 	RESERVED
-	- wavpack <unfixed> (bug #853076)
+	- wavpack 5.0.0-2 (bug #853076)
 	[wheezy] - wavpack <not-affected> (Vulnerable code not present)
 	NOTE: https://sourceforge.net/p/wavpack/mailman/message/35561951/
 	NOTE: Fixed by: https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc (5.1.0)
 CVE-2016-10171 [heap out of bounds read in unreorder_channels / wvunpack.c]
 	RESERVED
-	- wavpack <unfixed> (bug #853076)
+	- wavpack 5.0.0-2 (bug #853076)
 	NOTE: https://sourceforge.net/p/wavpack/mailman/message/35561939/
 	NOTE: Fixed by: https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc (5.1.0)
 CVE-2016-10170 [heap out of bounds read in WriteCaffHeader / caff.c]
 	RESERVED
-	- wavpack <unfixed> (bug #853076)
+	- wavpack 5.0.0-2 (bug #853076)
 	NOTE: https://sourceforge.net/p/wavpack/mailman/message/35561921/
 	NOTE: Fixed by: https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc (5.1.0)
 CVE-2016-10169 [global buffer overread in read_code / read_words.c]
 	RESERVED
-	- wavpack <unfixed> (bug #853076)
+	- wavpack 5.0.0-2 (bug #853076)
 	NOTE: https://sourceforge.net/p/wavpack/mailman/message/35557889/
 	NOTE: Fixed by: https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc (5.1.0)
 CVE-2016-10166 [Fix potential unsigned underflow]




More information about the Secure-testing-commits mailing list