Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=b1ba57161b752174fec92d3b89c0162572cd3f7f
commit b1ba57161b752174fec92d3b89c0162572cd3f7f Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Tue Aug 26 16:29:00 2008 +0200 FSA513-git diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index 12e7a17..7b2a285 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -26,6 +26,16 @@ <fsas> <fsa> + <id>513</id> + <date>2008-08-26</date> + <package>git</package> + <vulnerable>1.5.4.3-1</vulnerable> + <unaffected>1.5.6.4-1kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/3305</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3546</cve> + <desc>Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.</desc> + </fsa> + <fsa> <id>512</id> <date>2008-08-26</date> <package>amarok</package> _______________________________________________ Frugalware-git mailing list Frugalware-git@frugalware.org http://frugalware.org/mailman/listinfo/frugalware-git