Описание
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libbluray | fixed | 1:0.9.1-1 | package | |
| libbluray | no-dsa | jessie | package | |
| libbluray | no-dsa | wheezy | package |
Примечания
CVE was assigned specific to the Fedora packages, cf.
https://www.openwall.com/lists/oss-security/2015/10/12/7
Salvatored asked if Debian needs a separate CVE:
https://www.openwall.com/lists/oss-security/2015/10/13/6
No reply, so we'll just use the same ID
https://bugzilla.redhat.com/show_bug.cgi?id=959434
Связанные уязвимости
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
ALT-PU-2015-1652: package `libbluray` update to version 0.8.1-alt1