[Git][security-tracker-team/security-tracker][master] Add tracking bug for old uclibc issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jul 3 20:46:40 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd81c3db by Salvatore Bonaccorso at 2021-07-03T21:45:31+02:00
Add tracking bug for old uclibc issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -292657,7 +292657,7 @@ CVE-2016-6265 (Use-after-free vulnerability in the pdf_load_xref function in pdf
 CVE-2016-6264 (Integer signedness error in libc/string/arm/memset.S in uClibc and uCl ...)
 	{DLA-561-1}
 	- uclibc-ng <itp> (bug #811275)
-	- uclibc <unfixed> (unimportant)
+	- uclibc <unfixed> (unimportant; bug #990648)
 	NOTE: Just for cross-compiling, not used for actual packages
 	NOTE: https://repo.or.cz/uclibc-ng.git/commit/e3848e3dd64a8d6437531488fe341354bc02eaed
 	NOTE: http://mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html
@@ -305691,13 +305691,13 @@ CVE-2016-2218
 	RESERVED
 CVE-2016-2224 (The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before ...)
 	{DLA-561-1}
-	- uclibc <unfixed> (unimportant)
+	- uclibc <unfixed> (unimportant; bug #990648)
 	NOTE: Just for cross-compiling, not used for actual packages
 	NOTE: https://repo.or.cz/uclibc-ng.git/commit/d9c3a16dcab57d6b56225b9a67e9119cc9e2e4ac
 	NOTE: https://www.openwall.com/lists/oss-security/2016/02/05/2
 CVE-2016-2225 (The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng bef ...)
 	{DLA-561-1}
-	- uclibc <unfixed> (unimportant)
+	- uclibc <unfixed> (unimportant; bug #990648)
 	NOTE: Just for cross-compiling, not used for actual packages
 	NOTE: https://repo.or.cz/uclibc-ng.git/commit/6932f2282ba0578d6ca2f21eead920d6b78bc93c
 	NOTE: https://www.openwall.com/lists/oss-security/2016/02/05/2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd81c3db924903882128206bfab32d1cb9fc41e2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd81c3db924903882128206bfab32d1cb9fc41e2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210703/0f39e7c9/attachment.htm>


More information about the debian-security-tracker-commits mailing list