Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
579a1f2d by Chris Lamb at 2020-01-08T14:42:04+00:00
Add note regarding a possible regression in the handling of CVE-2015-1197 in
cpio.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -231045,6 +231045,7 @@ CVE-2015-1197 (cpio 2.11, when using the
--no-absolute-filenames option, allows
[squeeze] - cpio <no-dsa> (Minor issue)
NOTE: Patch used in SUSE:
https://bugzilla.suse.com/attachment.cgi?id=599460&action=diff
NOTE:
https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=45b0ee2b407913c533f7ded8d6f8cbeec16ff6ca
+ NOTE: Regression in upstream's handling of patch
https://bugs.debian.org/946267
CVE-2015-4469 (The chmd_read_headers function in chmd.c in libmspack before
0.5 does ...)
- libmspack 0.4-3 (bug #774726)
NOTE: http://www.openwall.com/lists/oss-security/2015/02/03/11
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/579a1f2de71387c8e19ad00095c3dfd1bb5aecac
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/579a1f2de71387c8e19ad00095c3dfd1bb5aecac
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
