Author: pere
Date: 2016-06-28 08:24:18 +0000 (Tue, 28 Jun 2016)
New Revision: 42845
Modified:
data/CVE/list
Log:
CVE-2016-4301 do not affect Jessie and Wheezy.
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-06-28 08:12:02 UTC (rev 42844)
+++ data/CVE/list 2016-06-28 08:24:18 UTC (rev 42845)
@@ -4828,6 +4828,8 @@
CVE-2016-4301 [mtree parse_device Stack Based Buffer Overflow]
RESERVED
- libarchive 3.2.1-1
+ [jessie] - libarchive <not-affected> (Introduced in 3.2.0)
+ [wheezy] - libarchive <not-affected> (Introduced in 3.2.0)
NOTE: http://blog.talosintel.com/2016/06/the-poisoned-archives.html
NOTE: http://www.talosintel.com/reports/TALOS-2016-0153/
NOTE: https://github.com/libarchive/libarchive/pull/715
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
