Author: pochu
Date: 2016-07-25 23:34:58 +0000 (Mon, 25 Jul 2016)
New Revision: 43473
Modified:
data/CVE/list
Log:
add upstream bug and wheezy note to gdk-pixbuf vulnerability
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-07-25 22:15:59 UTC (rev 43472)
+++ data/CVE/list 2016-07-25 23:34:58 UTC (rev 43473)
@@ -634,6 +634,8 @@
CVE-2016-XXXX [Write out-of-bounds]
- gdk-pixbuf <unfixed>
NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2016/07/13/11
+ NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=769170
+ [wheezy] - gdk-pixbuf <not-affected> (Fails with ENOMEM, no crash)
CVE-2016-6224 (ecryptfs-setup-swap in eCryptfs does not prevent the
unencrypted swap ...)
- ecryptfs-utils <not-affected> (Broken code not present; incomplete
fix for CVE-2015-8946 not applied)
NOTE: Actually due to an incomplete fix of LP#1447282
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
