[Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2017-8845

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ece8bffa by Salvatore Bonaccorso at 2018-05-16T22:24:55+02:00
Reference fix for CVE-2017-8845

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -55690,6 +55690,7 @@ CVE-2017-8846 (The read_stream function in stream.c in liblrzip.so in lrzip 0.63
 CVE-2017-8845 (The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in ...)
 	- lrzip <unfixed> (unimportant; bug #863151)
 	NOTE: https://github.com/ckolivas/lrzip/issues/68
+	NOTE: https://github.com/ckolivas/lrzip/commit/89d7b33e6a6450eed326b40084b547d42bad333f
 	NOTE: https://blogs.gentoo.org/ago/2017/05/07/lrzip-invalid-memory-read-in-lzo_decompress_buf-stream-c/
 	NOTE: Crash in CLI tool, no security implications
 CVE-2017-8844 (The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ece8bffa34541aafcb5290e90d0609f98770e138

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ece8bffa34541aafcb5290e90d0609f98770e138
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180516/e5a698d8/attachment.html>