[Git][security-tracker-team/security-tracker][master] Add note regarding a possible regression in the handling of CVE-2015-1197 in cpio.

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
579a1f2d by Chris Lamb at 2020-01-08T14:42:04+00:00
Add note regarding a possible regression in the handling of CVE-2015-1197 in cpio.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -231045,6 +231045,7 @@ CVE-2015-1197 (cpio 2.11, when using the --no-absolute-filenames option, allows
 	[squeeze] - cpio <no-dsa> (Minor issue)
 	NOTE: Patch used in SUSE: https://bugzilla.suse.com/attachment.cgi?id=599460&action=diff
 	NOTE: https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=45b0ee2b407913c533f7ded8d6f8cbeec16ff6ca
+	NOTE: Regression in upstream's handling of patch https://bugs.debian.org/946267
 CVE-2015-4469 (The chmd_read_headers function in chmd.c in libmspack before 0.5 does  ...)
 	- libmspack 0.4-3 (bug #774726)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/02/03/11



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/579a1f2de71387c8e19ad00095c3dfd1bb5aecac

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/579a1f2de71387c8e19ad00095c3dfd1bb5aecac
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200108/4d45f051/attachment.html>