D9598.id25293.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D9598.id25293.diff
View Options

	Index: head/security/vuxml/vuln.xml
	===================================================================
	--- head/security/vuxml/vuln.xml
	+++ head/security/vuxml/vuln.xml
	@@ -58,6 +58,34 @@
	* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
	-->
	<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
	+ <vuln vid="077bbadf-f2f4-11e6-92a7-902b34361349">
	+ <topic>diffoscope -- arbitrary file write</topic>
	+ <affects>
	+ <package>
	+ <name>py35-diffoscope</name>
	+ <range><ge>67</ge><lt>76</lt></range>
	+ </package>
	+ </affects>
	+ <description>
	+ <body xmlns="http://www.w3.org/1999/xhtml">
	+ <p>Ximin Luo reports:</p>
	+ <blockquote cite="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854723">
	+ <p>[v67] introduced a security hole where diffoscope may write to
	+ arbitrary locations on disk depending on the contents of an
	+ untrusted archive.</p>
	+ </blockquote>
	+ </body>
	+ </description>
	+ <references>
	+ <cvename>CVE-2017-0359</cvename>
	+ <url>https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854723</url>
	+ </references>
	+ <dates>
	+ <discovery>2017-02-09</discovery>
	+ <entry>2017-02-14</entry>
	+ </dates>
	+ </vuln>
	+
	<vuln vid="7f9b696f-f11b-11e6-b50e-5404a68ad561">
	<topic>ffmpeg -- heap overflow in lavf/mov.c</topic>
	<affects>