Author: carnil Date: 2017-01-29 13:22:47 +0000 (Sun, 29 Jan 2017) New Revision: 48524
Modified: data/CVE/list Log: CVE-2016-10173/ruby-minitrar assigned Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-01-29 13:18:49 UTC (rev 48523) +++ data/CVE/list 2017-01-29 13:22:47 UTC (rev 48524) @@ -52,6 +52,12 @@ RESERVED CVE-2017-5589 RESERVED +CVE-2016-10173 [directory traversal vulnerability] + - ruby-minitar <unfixed> + - ruby-archive-tar-minitar <removed> + NOTE: https://github.com/halostatue/minitar/issues/16 + NOTE: https://github.com/halostatue/minitar/commit/e25205ecbb6277ae8a3df1e6a306d7ed4458b6e4 + NOTE: https://bugzilla.opensuse.org/show_bug.cgi?id=1021740 CVE-2016-10172 [heap oob read in read_new_config_info / open_utils.c] - wavpack <unfixed> NOTE: https://sourceforge.net/p/wavpack/mailman/message/35561951/ _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits