Package: ming
Severity: serious
Tags: security

Hi,

the following vulnerabilities were published for ming.

CVE-2016-9264[0]:
global-buffer-overflow in printMP3Headers (listmp3.c)

CVE-2016-9265[1]:
divide-by-zero in printMP3Headers (listmp3.c)

CVE-2016-9266[2]:
left shift in listmp3.c

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-9264
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9264
[1] https://security-tracker.debian.org/tracker/CVE-2016-9265
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9265
[2] https://security-tracker.debian.org/tracker/CVE-2016-9266
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9266
Please adjust the affected versions in the BTS as needed.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      la...@debian.org / chris-lamb.co.uk
       `-

Reply via email to