[Git][security-tracker-team/security-tracker][master] Add CVE-2016-1072{1,2}/partclone

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8af66539 by Salvatore Bonaccorso at 2018-05-03T11:20:25+02:00
Add CVE-2016-1072{1,2}/partclone

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -48,9 +48,12 @@ CVE-2018-10683
 CVE-2018-10682
 	RESERVED
 CVE-2016-10722 (partclone.fat in Partclone before 0.2.88 is prone to a heap-based ...)
-	TODO: check
+	- partclone 0.2.88-1
+	NOTE: https://david.gnedt.at/blog/2016/11/14/advisory-partclone-fat-bitmap-heap-overflow/
+	NOTE: https://github.com/Thomas-Tsai/partclone/issues/71
 CVE-2016-10721 (partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer ...)
-	TODO: check
+	- partclone 0.2.88-1
+	NOTE: https://github.com/Thomas-Tsai/partclone/issues/82
 CVE-2018-10681
 	RESERVED
 CVE-2018-10680 (** DISPUTED ** Z-BlogPHP 1.5.2 has a stored Cross Site Scripting ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af6653918e7f148852d4fb1a374650f6bdc839f

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af6653918e7f148852d4fb1a374650f6bdc839f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180503/a1368c94/attachment.html>