Attachment 157277 Details for Bug 200199 – security/vuxml update for existing dcraw entry

[patch] security/vuxml update for existing dcraw entry

rawstudio_vuxml2.diff (text/plain), 1.11 KB, created by Jason Unovitch on 2015-05-30 10:08:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jason Unovitch

Created: 2015-05-30 10:08:00 UTC

Size: 1.11 KB

patch

obsolete

>Index: security/vuxml/vuln.xml
>===================================================================
>--- security/vuxml/vuln.xml	(revision 387921)
>+++ security/vuxml/vuln.xml	(working copy)
>@@ -971,9 +971,13 @@
>   </vuln>
> 
>   <vuln vid="57325ecf-facc-11e4-968f-b888e347c638">
>-    <topic>ufraw -- integer overflow condition</topic>
>+    <topic>rawstudio and ufraw -- integer overflow condition</topic>
>     <affects>
>       <package>
>+	<name>rawstudio</name>
>+	<range><lt>2.0_11</lt></range>
>+      </package>
>+      <package>
> 	<name>ufraw</name>
> 	<range><lt>0.21</lt></range>
>       </package>
>@@ -994,12 +998,14 @@
>       </body>
>     </description>
>     <references>
>+      <cvename>CVE-2015-3885</cvename>
>       <url>http://www.ocert.org/advisories/ocert-2015-006.html</url>
>-      <url>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3885</url>
>+      <url>https://github.com/rawstudio/rawstudio/commit/983bda1f0fa5fa86884381208274198a620f006e</url>
>     </references>
>     <dates>
>       <discovery>2015-04-24</discovery>
>       <entry>2015-05-15</entry>
>+      <modified>2015-05-30</modified>
>     </dates>
>   </vuln>
>

Actions: View | Diff

Attachments on bug 200199: 157240 | 157270 | 157271 | 157277