[Git][security-tracker-team/security-tracker][master] Add reference to upstream commit for CVE-2016-2037/cpio

Salvatore Bonaccorso carnil at debian.org
Sun Jul 29 07:39:23 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8d8d213c by Salvatore Bonaccorso at 2018-07-29T06:38:45Z
Add reference to upstream commit for CVE-2016-2037/cpio

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -116185,6 +116185,7 @@ CVE-2016-2037 (The cpio_safer_name_suffix function in util.c in cpio 2.11 allows
 	NOTE: http://www.openwall.com/lists/oss-security/2016/01/19/4
 	NOTE: To reproduce and uncover the issue with unstable version compile with ASAN
 	NOTE: Patch: https://lists.gnu.org/archive/html/bug-cpio/2016-01/msg00005.html
+	NOTE: https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=d36ec5f4e93130efb24fb9678aafd88e8070095b
 CVE-2016-2050 (The get_abbrev_array_info function in libdwarf-20151114 allows remote ...)
 	{DLA-669-1}
 	- dwarfutils 20160507+git20160523.9086738-1 (unimportant)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8d8d213c6ce1416daca4dfd0e96ad81693447959

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8d8d213c6ce1416daca4dfd0e96ad81693447959
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180729/82e534d0/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list