Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8af66539 by Salvatore Bonaccorso at 2018-05-03T11:20:25+02:00
Add CVE-2016-1072{1,2}/partclone
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -48,9 +48,12 @@ CVE-2018-10683
CVE-2018-10682
RESERVED
CVE-2016-10722 (partclone.fat in Partclone before 0.2.88 is prone to a
heap-based ...)
- TODO: check
+ - partclone 0.2.88-1
+ NOTE:
https://david.gnedt.at/blog/2016/11/14/advisory-partclone-fat-bitmap-heap-overflow/
+ NOTE: https://github.com/Thomas-Tsai/partclone/issues/71
CVE-2016-10721 (partclone.restore in Partclone 0.2.87 is prone to a heap-based
buffer ...)
- TODO: check
+ - partclone 0.2.88-1
+ NOTE: https://github.com/Thomas-Tsai/partclone/issues/82
CVE-2018-10681
RESERVED
CVE-2018-10680 (** DISPUTED ** Z-BlogPHP 1.5.2 has a stored Cross Site
Scripting ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af6653918e7f148852d4fb1a374650f6bdc839f
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af6653918e7f148852d4fb1a374650f6bdc839f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
